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at a conference in France. pace 16 
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Users Buoyed 
By Monthly 


Patch Releases 


Microsoft’s approach 
makes process more 


BY JAIKUMAR VIJAYAN 

Microsoft Corp.’s move to a 
monthly patch-release cycle 
one year ago this month has 


made it easier to install securi- | 


ty updates for Windows and 
other products, IT managers 
said last week — even as they 
were greeted with a barrage of 
new fixes, many for flaws that 
were given “critical” severity 
ratings by Microsoft. 

The October patch rollout 
was one of Microsoft’s largest 
this year, consisting of 10 
patches designed to address 
a total of 20 vulnerabilities 
across a wide range of the 
company’s products. Seven of 
the security updates were rat- 
ed as “critical” for users to in- 
stall, and the other three were 
labeled “important.” 
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| most all the patches released 


| thing,” said Hugh McArthur, | 


| “It has been helpful for plan- 
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| Security Updates ff 


The “critical” patches released 
by Microsoft last week include: 
MS04-032: Fixes several secu- 
rity holes in Windows NT, XP and 
Server 2003 that could allow at- 
tackers to take complete control 
of unprotected systems and view, 
change or delete data on com- 
promised machines. 


MS04-033: Patches a remote 
code execution vulnerability in 
several versions of Excel for Win- 
dows and Macintosh systems. 


eeenseseseescses 


MS04-034: Addresses a flaw in 
the way that Windows XP and 
Server 2003 process com- 
pressed files. 


The massive release high- 
lighted Microsoft’s continuing 
struggles with software secu- 
rity. Nevertheless, six users 
said the monthly cycle that the | 
vendor has followed for al- | 


since last October has made 
the patching process more 
| 
“Overall, the [monthly 
patching] schedule is a good 
. . . | 
information systems security 
officer at Online Resources 
Corp., an online bill-process- 
ing company in McLean, Va. 


ning purposes and in allowing 

us to evaluate the patches 

once a month, versus having 
Patches, page 55 | 
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| a year-end reporting 
deadline for Sarbanes- 
| Oxley compliance. 


| cause many companies 
| failed to grasp the 

| amount of work that would be 
| required and because of mis- 


IT Scrambles to Meet 


Slow starts, miscommunication put companies 


| under the gun on technology-related mandates 





BY THOMAS HOFFMAN 
| IT departments at many large 
| companies are racing to docu- 
| ment, remediate and test IT- 


related controls to meet 


The rush is on be- 


| communication between IT 


managers and the finance de- 


partments that typically run 
Sarbanes-Oxley Act compli- 
ance projects, according to 


| users and analysts who were 
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interviewed last week. 
“What I’ve seen is a 
‘Let’s drop everything 
and get this done’ ap- 
proach on dealing with 
IT controls from the 
second quarter until 


| now,” said John Hagerty, an 
| analyst at AMR Research Inc. 
| in Boston. 


Hagerty and several other 


Sarb-Ox Controls Deadline 


analysts and consultants said 
they expect that most compa- 
nies that need to show Sarb- 
Ox compliance by year’s end 
will get the bulk of their IT 
controls documented and test- 
ed in time. But some analysts 
predicted that in annual 10-K 
reports early next year, as 
many as 25% of the so-called 
accelerated filers will have to 
report controls-related excep- 
tions that require additional 
remediation. Depending on 


| the severity of the problems, 


companies could be fined by 
the U.S. Securities and Ex- 
change Commission. 

Sarb-Ox, page 16 
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Stretching 


Your Storage 


Demand for data 
storage is far out- 


pacing the growth 

of IT budgets, so something has to 
give. This special report identifies cost-saving strate- 
gies to help you cope. Stories begin on page 35. 
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Mmzma IBM Adds High-End, 
Midrange Dis 


Performance, capacity boosted in first 
storage systems based on IBM chips 


Cisco, Microsoft 
Bridge Security Gap 


CISCO SYSTEMS INC. and 
MICROSOFT CORP. today will an- 
nounce a collaborative effort de- 
signed to bridge a divide between 
their emerging network access-con- 
trol architectures. 

The two companies said on Friday 
that they have agreed to share appli- 
cation programming interfaces and 
jointly develop protocols intended to 
improve interoperability between Mi- 
crosoft’s Network Access Protection 
technology and Cisco's rival Network 
Admission Control offering. 

NAP and NAC are designed to 
help companies enforce security 
policies on network endpoint sys- 
tems such as PCs and mobile de- 
vices. The technologies let IT man- 
agers set rules that prevent a client 
device from accessing a network un- 
less it complies with policies on anti- 
virus software updates, firewall con- 
figurations and other issues. 

But Cisco’s plan is to integrate 
the functionality into its routers, 
switches and virtual private network 
devices, while Microsoft's strategy is 
focused on embedding NAP in its 
operating systems. 

The agreement to collaborate 
means that users shouldn't have to 
worry about interoperability issues, 
said Joel Conover, an analyst at Cur- 
rent Analysis Inc. in Sterling, Va. “Mi- 
crosoft and Cisco needed to do this,” 
he said. “A lack of cooperation would 
have resulted in competing standards 
or no standards at all, both of which 
are unattractive to enterprises.” 

Cisco released an initial set of NAC 
products in June [QuickLink 47781]. 
Microsoft will add VPN Quarantine 
support in the first service pack for 
Windows Server 2003, due by mid- 
2005. But Steve Anderson, director 
of networking in Microsoft's Windows 
Server group, said full NAP support 
won't come until the Longhorn ver- 
sion of Windows, expected in 2007. 

Microsoft had planned to fully sup- 
port NAP in an update to Windows 
Server 2003 that’s due in the sec- 
ond half of 2005. Anderson said the 
delay is being caused by the deal 
with Cisco and a decision by Micro- 
soft to add IPsec enforcement in ad- 
dition to Dynamic Host Configuration 
Protocol enforcement. 

- Jaikumar Vijayan and Carol Sliwa 











BY LUCAS MEARIAN 
NEW YORK 
BM LAST WEEK unveiled 
two new enterprise-class 
disk arrays. One is aimed 
at the high end and one at 
midrange environments, but 
both have compatible software 
that allows the boxes to be 
managed through a single in- 
terface and data to be replicat- 
ed between them. 

The TotalStorage DS8000, 
the next generation of IBM’s 
high-end Enterprise Storage 
Server, also known as the 
Shark, boosts performance as 
much as sixfold, and the 
192TB capacity is more than 
three times that of its prede- 
cessor. The midrange Total- 
Storage DS6000 array is a 
rack-mountable, 3U-high unit 
that scales from 580GB to 
67.2TB. (1U is 1.75-in. high.) 

Both boxes represent the 
first time IBM has used native 
Fibre Channel disk drives in- 
stead of SCSI with Fibre 
Channel bridges. Charles Lick- 
el, vice president of software 
and storage development at 
IBM, said the arrays will be of- 
fered with less-expensive Ad- 
vanced Technology Attach- 
ment disks by the end of 2005. 





The arrays will ship Dec. 3. 
The DS8000 and DS6000 can 
be used as primary storage for 
IBM zSeries and iSeries main- 
frames as well as for Unix, 
Linux and Wintel servers. The 
DS8000 can be upgraded on 
the fly from two to four proc- 
essors. 

For the first time, IBM used 
its own server processors for 
storage. The refrigerator-size 
DS8000 uses the pSeries 
processor, and the DS6000 
uses an IBM PowerPC chip. 


Compatibility a Plus 
Users at a press event here 
said they were impressed by 
the increase in performance 
and the ability to use a single 
management platform across 
all of IBM’s storage products. 
“Tt’s easy to talk about the 
new stuff, but when you’ve got 
an existing infrastructure, 
you've got to have something 
that blends into that,” said Bob 
Venable, manager of enter- 
prise systems at BlueCross 
BlueShield of Tennessee Inc. 
in Chattanooga. The users also 
said they looked forward to an 
upgrade that, as with a main- 
frame, will allow multiple logi- 
cal partitions to be created au- 





IBM Storage Arrays 


IBM DS8000 
= Retail starting price: $134,000 


= 256GB of cache 


= Supports 96 petabytes of external 
storage 


= 128 Fibre Channel or Ficon ports 


#!n 2005, will be expandable from 
two to eight processors and 512GB 
of cache 


DS6000 (PICTURED ABOVE) 
= Retail starting price: $97,000 


= Configured through Web-based 
interfaces 


= 4GB of cache 
= 16 Fibre Channel or Ficon ports 


tomatically in response to ap- 
plication needs. IBM pledged 
to add that capability over the 
next year. 

Currently the DS8000 can 
be manually split into two sep- 


| arate systems. 


Tony Asaro, an analyst at 





www.computerworld.com 


Enterprise Strategy Group Inc. 
in Milford, Mass., gave the 
new IBM disk arrays high 
marks for their price, compati- 
bility, four-year warranty and 
use of IBM-built processors. 
But he added that IBM must 
still address the network- 
attached storage and content- 
addressed storage markets, 
like chief competitors EMC 
Corp. and Hitachi Data Sys- 
tems Corp. have. 

Both arrays use an internal- 
ly switched architecture in- 
stead of Fibre Channel arbi- 
trated loop, which brings IBM 
up to speed with similar boxes 
from its major competitors. 

Dale Collier, senior vice 
president of technology at Re- 
gions Financial Corp. in Mont- 
gomery, Ala., said he likes the 
compatibility between the 
DS8000 and DS6000. He’s 
considering buying both to 
replicate between a data cen- 
ter in Montgomery and a sec- 
ondary one in Birmingham, 
Ala. Regions’ infrastructure 
includes IBM mainframes and 
Shark arrays and EMC’s high- 
end Symmetrix arrays. 

“Today, we're dealing with 
SunGard for disaster recovery, 
and at best that’s a 24-hour 
[recovery time objective],” 
Collier said. By replicating the 
DS8000 and DS6000 between 
data centers, he could recover 
data in seconds, he said. 

John Dick, CIO at Regions 
Financial, said he likes the 
new arrays but added that the 
technology also offers him a 
chance to get older-model 
Shark arrays at a cut-rate 


price. @ 50078 


Starbucks Taps HP for 
Music Download Service 


STARBUCKS CORP. last week said 
it will use hardware and software 
from Hewlett-Packard Co. te serve 
up a vast digital library of songs to 
customers along with its coffee. 
Starbucks customers will be 
able to use tablet PCs supplied by 
HP to listen to songs, download 


: them and burn them onto CDs. 


A nationwide launch of the new 


: setup, which Starbucks is calling its 

: Hear Music “media bar,” is sched- 

: uled to begin today at 15 outlets in 

: Seattle and will expand to 30 coffee 
: shops in the Austin area starting next 
: Monday. 


Starbucks is installing HP tablet PCs, workstations and printers to support 
its new in-store music-download and CD-burning service. 
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Vendors Upgrade Development Tools 


IBM, Borland aim to bring business 
process automation to app design work 





BY HEATHER HAVENSTEIN 

IBM and Borland Software 
Corp. last week separately 
brought out upgrades to their 
development tool lines that 
executives said add support 
for heterogeneous environ- 
ments and more closely link 
software creation to business 
goals. 

IBM unveiled an expanded 
Rational Software product line 
that it had previewed under 
the code name Atlantic at the 
annual Rational user group 
conference last summer 
[QuickLink 48365]. Mean- 
while, Borland rolled out a 
new version of its long-run- 
ning Delphi Windows devel- 
opment tool family. Observers 
said both companies are ma- 
neuvering to infuse their plat- 
forms with business process 
automation commonly used in 
other corporate operations 
such as core product design 
and manufacturing. 

“What we’re seeing today in 
IT shops is the need to [start] 
thinking more strategically 
about IT priorities and how 
the overall IT assets and re- 
sources can be best matched 
to deliver business value,” said 
Melissa Webster, an analyst at 
market research company 
IDC. 

IBM’s release of the Ratio- 


Starbucks has made the HP 
Tablet PC TCTIOO systems more 
durable by adding an aluminum 
frame and stronger cables for the 
headsets, said James Snook, vice 
president of technology strategy 
and innovation at the Seattle- 
based company. He added that 
touch-screen technology elimi- 
nates the need for a keyboard. 

“We found a way to comple- 
ment the existing store environ- 
ment without changing it to a sig- 
nificant extent,” Snook said. Using 
a custom application on the tablet 
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nal tool set brings all the offer- 
ings into the Eclipse 3.0 frame- 
work, an open-source devel- 
opment platform that promis- 
es deeper integration of the 
various products, Webster 
said. Eclipse replaces propri- 
etary application program- 
ming interfaces previously 
used to integrate the Rational 
tools. 

The Rational tools lineup 
includes Portfolio Manager, 


PCs, customers sitting at a music 
bar or in nearby chairs will be able 
to view a directory and hear selec- 
tions from an in-store database of 
more than 150,000 songs. 

An HP xw4100 workstation will 
store the songs and support the 
creation of professional-quality 
music CDs, while an HP Business 
InkJet 9670 printer will allow cus- 
tomers to produce personalized 
CD covers, inserts, graphics and 
packaging, said Marc Kriz, HP’s 
worldwide alliance manager for 
Starbucks. 


Software Architect, Software 
Modeler and Manual Tester. 

The modeling tool includes 
support for Unified Modeling 
Language 2.0 for visual-based 
modeling. IBM will continue 
supporting the older Rational 
Rose and Rational XDE mod- 
eling systems. 

IBM will acquire the port- 
folio management software 
through its planned purchase 
of Systemcorp ALG Ltd. (see 
story, below right). 


Diamondback Strikes 
Meanwhile, Borland this week 
unveiled Delphi 2005, which 
incorporates support for .Net 
Win32, Delphi and C# in one 


with Borland application life- 
cycle management tools. 

Code-named Diamondback, 
Delphi 2005 supports Bor- 
land’s Software Delivery Opti- 
mization plan to apply busi- 
ness process automation to 
software development tools, 
the company said. 

Delphi 2005 also provides 
an alternative to the end-to- 
end development platforms 
from IBM and Microsoft 
Corp., said Gartner Inc. ana- 
lyst Mark Driver. Many IT 
managers with systems from 
both Microsoft and IBM con- 
tend that recurring features in 
multivendor tools complicate 
development projects, he said. 

“Borland is one of the very 
few pure tools vendors of any 





Starbucks plans to charge 


= $8.99 for the first seven songs and 
: 99 cents for each additional one. 

: Credit card data for processing 

: payments will be sent from the 

: tablet PCs to the company’s point- 
: of-sale system via in-store Wi-Fi 

: networks. 


HP and Starbucks wouldn't dis- 


close the expected cost of the 
> technology deployment. 


Snook said the rollout will take 


> years to complete but wasn't more 
> specific. 


- Matt Hamblen 


environment while integrating 


serious size left in the indus- 


try, [and] they have to play 


| both sides of the fence,” 


Driver said. 
Omar Sayed, CEO of Suc- 


| ceed Corp. in Chandler, Ariz., 


has used Delphi to build 
e-commerce systems for his 


| customers to store data and 


operate online auctions. The 
new features — especially 
support for Win32, .Net and 


| C# in one environment — will 
give company developers 
| “more scope to what they can 


do without having to go out- 
side and bridge things in dif- 
| ferent environments,” he said. 


IBM last week agreed to ac- 
quire Systemcorp ALG Ltd., 

a Montreal-based project port- 
folio management company, 


business process-driven soft- 
ware development. 

IBM plans to fold System- 
corp's Web-based PMOffice 
software into its Rational de- 
velopment platform as Ra- 
tiona! Portfolio Manager. The 
portfolio manager tool can 
provide a comprehensive view 
of IT projects across the enter- 
prise, tracking all project deliv- 
erables, such as budgets and 
tasks, until the work is com- 
pleted, IBM said. 

Financial terms of the deal 
weren't disclosed. 

Systemcorp’s software can 
provide Rational users the visi- 


ly manage IT investments, said 
Roger Oberg, IBM's vice presi- 
dent of marketing for Rational 

products. 


a discrete set of activities done 
by testers and developers and 
architects in isolation, but is a 
business process . . . that 
lends itself to automation and 





as part of a strategy of pushing 


bility needed to more effective- 


“Software developmentisn’t - 


Delphi 2005 is slated to ship 


| next month. The Architect 


Edition is priced at $3,000 for 


| new users and $1,999 for an 

| upgrade, while the Enterprise 
| Edition lists at $2,500 for new 
| users and $1,500 for an up- 

| grade. The Professional Edi- 

| tion is priced at $999 for new 


users and $399 for an upgrade. 
All of the new IBM products 


| will be available by year’s end. 


Pricing ranges from $5,500 per 


| user for Rational Software Ar- 
| chitect to $1,000 per user for 

| the IBM Rational Web Devel- 
| oper for WebSphere. @ 50105 


| MORE ONLINE 


For more on this topic, visit our 


| Development Knowledge Center 


QuickLink a3110 
www.computerworld.com 


IBM to Buy Systemcorp 
To Bolster Rational Line 


integration,” Oberg said. “All 
of the software development 
investment decisions take 
place in the broader context 
of an IT portfolio management 
decision.” 

The Systemcorp technolo- 
gy, built using IBM’s Web- 
Sphere Portal, was designed 
to complement IBM middle- 
ware, Oberg added. 

The tool can help CiOs ef- 
fectively communicate how IT 
resources are deployed to re- 
spond to overarching business 
priorities, said Melissa Web- 
ster, an analyst at market re- 
search company IDC. Because 
the tool tracks costs and other 
expenses against project mile- 
stones, it can link developer 
tears to the business goals, 
she added. 

“A few years ago, those dis- 
cussions were held on a rather 
technical level,” Webster said. 
“It was hard for the lines-of- 
business people to gain some 
visibility as to what the issues 
were when the business priori- 
ties change . . . or when proj- 
ects were delayed, why they 
were delayed.” 

~ Heather Havenstein 
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BRIEFS 
Novell Will Defend 
Open-Source 


Novell Inc. said it’s prepared to 
use its patent portfolio to protect 
its open-source software against 
lawsuits. The company vowed to 
employ “the same measures gen- 
erally used to defend proprietary 
software products” if other ven- 
dors claim that its open-source 
offerings infringe on their patents. 
Novell didn’t promise that it would 
never use its patents against oth- 
er Linux vendors but said that it 
has no intention of doing so. 


SCO to State Case 


On New Web Site 


The SCO Group Inc. said it plans 
on Nov. 1 to launch a Web site de- 
voted to its legal battles with Nov- 
ell and other Linux backers. The 
www.prosco.net site will let SCO 
“tell our side of the story,” CEO 
Darl McBride said at the ETRE 
conference in Cannes, France. A 
spokesman for Lindon, Utah-based 
SCO said the site is being created 
partly in response to www.groklaw. 
net, an independent Web site that 
has been critical of SCO. 


Cisco Inks Security 
Deals With CA, IBM 


Computer Associates Internation- 
al Inc. said it plans to integrate its 
antivirus and antispyware tools 
with Cisco Systems Inc.’s Trust 
Agent software. Trust Agent, 
which is part of Cisco’s Network 
Admission Control offering, works 
with NAC-enabled routers to stop 
unsecured PCs from accessing 
networks. Separately, Cisco and 
IBM said that IBM’s Tivoli man- 
agement software now interoper- 
ates with the NAC products. 


Short Takes 


WAL-MART STORES INC. said it 
has expanded its data warehouse, 
which is based on NCR Corp.’s 
Teradata software. But it didn’t 
disclose any details. (See related 
items at right.) ... SAP AG up- 
graded its business applications 
for small and midsize companies. 
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Orange Everywhere in 
October? Must Be .. . 


... Halloween? Or maybe the Syracuse University Orange- 
men football team had arrived in Seattle to battle the 
University of Washington Huskies? Neither. The 
Washington State Convention and Trade Center was 
mobbed last week by 3,000 database and business 


intelligence 
(BI) wizards 
festooned 
with orange 
vests, hats, 
shirts and 
even shoes. 
Many also 
carried or- 
ange travel 
bags, back- 
packs and 
briefcases — not necessarily 
to display their questionable 
fashion sense, but to show 
their colors while attending 
Teradata’s annual user con- 
ference. The San Diego-based 
data warehousing division of 
NCR Corp. has adopted or- 
ange as its corporate color. In 
addition to doing brisk busi- 
ness in orange clothing and 
tchotchkes, the company gave 
users a sneak peek at Terada- 
ta Warehouse 8.0, a software 
upgrade that’s due in early 
December. According to Alan 
how, Teradata’s senior vice 
president for R&D, the new 
release will conform to Web 
services and message-passing 
architectures, linking it more 
tightly with business applica- 


CHOW: Tera- 
data improves 
seat cs) 

to real time. 





tions. Perhaps more impor- 
tant, he says, 8.0 makes it eas- 
ier to trigger external stored 
procedures so other applica- 
tions can automatically react 
to BI discovered inside a Ter- 
adata data warehouse. Chow 
also brags that 8.0 improves 
the responsiveness of data 
warehouses to real-time rates. 


Near real-time analytics 
helped boost. . . 

. . . Continental Airlines Inc. 
from worst to first. That’s the 
opinion of Kelly Cook, direc- 
tor of customer relationship 
management at the Houston- 
based airline. Cook claims 
that BI that Continental 
gleaned from its customers 
helped move it from last 
place in travelers’ opinions 
nine years ago to the winner 
of this year’s award for best 
airline from London-based 
OAG Worldwide Ltd. The 
first move Continental made 
to improve frequent-flier re- 
lations back in the mid-’90s 
was to consolidate 55 databas- 
es worldwide into a single 
Teradata data warehouse. 
“We wanted one voice of the 





customer,” Cook says. Next, 
the goal was to identify high- 
yield customers, create loyal- 
ty programs and get more im- 
mediate data on the cost of 
each flight. For example, 
flight attendants now receive 
information from the data 
warehouse about high-value 
customers on a flight so 

they can personally express 
the airline’s interest in and 
knowledge about the cus- 
tomers’ recent flying experi- 
ences with Continental. And 
the company’s financial ana- 
lysts can get information 
about the profitability of each 
flight instantly after “wheels 
up,” Cook says. She adds that 
in the future, she wants the 
data warehouse to use real- 
time clickstream data to auto- 
matically generate targeted 
offers to Continental’s Web 
site visitors. 


Data warehouse 


cuts costs for... 

. .. cost-conscious Southwest 
Airlines Co. The Dallas-based 
carrier centralized its BI 
group two years ago around a 
Teradata data warehouse in 
order to keep a lid on IT costs 
through better systems man- 
agement and more efficient 
staffing policies. “We're the 
low-cost airline, so we should 
have a low-cost infrastruc- 
ture,” says Patrick Bolin, se- 
nior manager of enterprise 
data warehousing at South- 
west. Besides helping to hold 
down IT spending, the 2TB 
data warehouse helps busi- 
ness analysts cut corporate 
costs. Bolin pegs the annual 
savings from ideas generated 
through use of the data ware- 
house at between $1.2 million 
and $1.4 mil- 
lion. As a re- 
sult of that 
success, the 
data ware- 
house is des- 
tined to grow. 
Bolin esti- 
mates that it 
will increase 
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| to 3TB by next summer and 
possibly double that volume 
by 2007. He says his team is 
developing better ways of 
handling ad hoc query re- 
quests from end users and 
creating dashboard-style tools 
for the airline’s executives. 


‘Extreme data 


warehousing’ is... 
. .. just around the corner, pre- 
dicts Stephen Brobst, Tera- 
data’s chief technology offi- 
cer. The “extreme” future that 
Brobst envisions for data 
warehouse managers has 
three drivers: vast increases 
in data volume, demand for 
real-time re- 
sponsiveness 
and hordes of 
new users. 
Brobst points 
to potential 
petabytes of 
data created 
by RFID technology. Compa- 
nies that use RFID had better 
be prepared to harvest data at 
rates “two orders of magni- 
tude greater” than they’re 
used to getting, he says. Data 
warehouse performance will 
also be critical for BI apps, 
according to Brobst. A data 
warehouse that can’t index 
new information “instanta- 
neously or near instanta- 
neously” is going to be all but 
useless in the coming years, 
Brobst claims. He adds that 
CEOs who want their compa- 
nies to become responsive 
“real-time organizations” are 
foolish if they leave out BI. “A 
real-time enterprise without 
real-time business intelli- 
gence is a real fast, dumb or- 
ganization,” he quips. Finally, 
Brobst estimates that the 
number of BI users of a typi- 
cal data warehouse will leap 
by a factor of 10 in the next 
few years. Just to make sure it 
could handle the load, Tera- 
data last year increased the 
number of users who can ac- 
cess its data warehouse by a 
factor of more than 100,000. 
That should do it. @ 50060 
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Offshoring Fuels IT 
Hiring Boom in India 


Cost of services 
could increase as 


demand, wages rise | 


BY PATRICK THIBODEAU 
N QUARTERLY financial- 
results reports released 
last week, offshore out- 
sourcing firms in India 

detailed sharp increases in 
employee head count. But 
analysts said the growing de- 
mand for offshore services 
and workers is increasing 
wages in India, raising the 
potential of rate increases for 

U.S. customers. 

For now, at least, competi- 
tion in India is keeping billing 
rates stable. But several ana- 
lysts predicted that the cur- 
rent situation won’t continue 
indefinitely because competi- 
tion for experienced employ- 
ees will increase. 

During the quarter that end- 
ed Sept. 30, Infosys Technolo- 
gies Ltd.’s workforce grew 
from 27,939 to 32,949 — an 18% 
increase in just three months. 
At the end of last year’s third 
quarter, Bangalore-based In- 
fosys had 18,580 employees. 

Mumbai-based Tata Con- 
sultancy Services Ltd. said its 
head count climbed nearly 
12% in this year’s third quarter, 
from 36,636 to 40,948. In June 
2003, Tata employed about 
24,000 people. 

“Bangalore today is like 
Silicon Valley was five years 
ago,” said Lance Travis, an an- 
alyst at Boston-based AMR 
Research Inc. 


Cee ereeeeeeesesesesesseeseseses 


Correction 

A STORY ABOUT e-mail security 
appliances that ran in last week's 
News section (“Vendors Add 
Weapons to Battle E-mail Virus- 
es”) incorrectly listed the amount 
of venture capital funding raised 
by Avinti Inc. The Lindon, Utah- 
based company has raised about 
$3 million in financing thus far. 


The growth in overseas IT 


| employment stems from rising 


demand for offshore services 
from U.S. companies, accord- 
ing to Meta Group Inc. Meta 
estimates that offshore spend- 


| ing by U.S. businesses will 


reach $10 billion this year and 


| that the use of offshore ser- 


vices will grow about 20% 
annually through 2008. And 
that’s with more than half of 
all companies not yet using 
any offshore services, said 
Meta analyst Dane Anderson 


| (see chart). 


Offshore demand is expect- 


| ed to drive up salaries in India 
by about 14% this year, espe- 
| cially for experienced work- 


ers, said Eugene Kublanoyv, an 
analyst at outsourcing consult- 
ing firm NeolIT Inc. in San Ra- 





| mon, Calif. The increases are 


likely to continue at a similar 
pace, Kublanov added. An ex- 
perienced Indian programmer 
making $7,400 this year can 
expect to earn about $8,500 in 
2005, he said, noting that the 


| same employee may be mak- 


ing twice that amount by 2010. 
To cover such increases, off- 

shore vendors will have to be- 

come more efficient and add 


| more-sophisticated IT ser- 


vices so they can charge high- 
er prices. Kublanov said that 
although application develop- 
ment rates in India remain 
roughly one-third of what they 
are in the U.S., the costs there 


| are creeping to $19 to $20 per 


hour this year, compared with 
$17 to $18 in 2003. 
Competition for employees, 





Offshoring Usage 


Meta Group’s breakdown of 
offshore outsourcing usage by 
U.S. companies, based on an 
analysis of its client base: 
55%: Don't 33%: Send 
send IT work about 5% of 


offshore their IT work 
offshore 


8%: Have 
sent 10% to 
30% of their 
work offshore 


- 2 


4%: Rely on 
offshore firms 
for up to half of 
their IT work 


| as well as the threat of in- 


creasing turnover, is prompt- 
ing some companies to try dif- 
ferent approaches to recruit- 
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ing and retaining workers. 

At its offshore outsourcing 
facility in Hyderabad, Sierra 
Atlantic Inc. has begun hold- 
ing “parents day” gatherings 
for recent college graduates 
who are considering job of- 
fers. The Fremont, Calif.- 
based company hopes that 
winning over the parents of 
potential new hires will in- 
crease the likelihood that its 
job offers will be accepted. 

“The majority of college 
graduates have arranged mar- 
riages still,” said Marc Hebert, 
a vice president at Sierra At- 
lantic. “The parents are very 
involved in these kids’ lives.” 

Hebert said that in Hydera- 
bad, where Sierra Atlantic has 
a 700-employee facility, annu- 
al turnover has reached about 
15%, putting it on par with oth- 
er large cities in India. The ac- 


| celerating demand for workers 


is prompting Sierra Atlantic to 
consider setting up operations 
in other regions of India, as 
well as in countries such as 


China, he said. @ 50111 








BMC Integrates Tools for IT, Business Management 


BY MATT HAMBLEN 


| BMC Software Inc. last week 


announced plans to integrate a 
variety of its systems manage- 
ment tools with a product that 
lets users track how IT prob- 
lems affect individual business 
processes. 

Houston-based BMC said an 
upgrade of its Service Impact 
Manager software will include 
links to products such as the 


| company’s mainframe and 


DB2 database management 
tools and its Remedy help 
desk and asset management 
tools. Service Impact Manager 
5.0, which is due in December, 
will also include a built-in 
configuration management 
database and other new fea- 
tures (see box). 

The upgrade is aimed at 
broadening BMC’s Business 
Service Management (BSM) 
offering, which is designed to 
give IT managers a set of tools 
for linking computing re- 


| sources to business priorities. 


Peter Armstrong, director 
of corporate strategy at BMC, 
said that in addition to the in- 





ternal product integration ca- 
pabilities, the BSM software 
can interoperate with rival 
management tools such as 
Hewlett-Packard Co.’s Open- 
View and Computer Associ- 
ates International Inc.’s Uni- 
center. Users who install Ser- 
vice Impact Manager “don’t 
have to rip out their existing 
products,” Armstrong said. 


OTHER FEATURES 


Service Impact 
Manager 5.0 


A Web-based software por- 
tal that provides system status 
information and customizable 
CElem lis) 


ATAU CLO CMEC mel) 
technology from Business 
Objects SA 


We lter-m le mura 
TLC MSL ecm [TAN UNM a -1(0) 8) 
business service models 


Integration with an IT asset 
discovery tool that shows the 
relationships between sys- 
tems and applications 





Joe Furmanski, technology 
project director at the Univer- 
sity of Pittsburgh Medical 
Center, said he’s testing Ser- 
vice Impact Manager 5.0 for 
use in monitoring the center’s 
E-Health system, which is 
used to order medications, 
manage surgeries and provide 
patient information to doctors 
and other employees. 

The E-Health system is 
based on applications devel- 
oped by Kansas City, Mo.- 
based Cerner Corp. and is 
being rolled out at 20 medical 
facilities in western Pennsyl- 
vania as part of a 10-year, 
$130 million project. 

Service Impact Manager is 
expected to help IT staffers 
keep the system running 
around the clock and provide 
information to business man- 
agers when technical problems 
do occur, Furmanski said. 

The medical center chose 
BMC over other vendors pri- 
marily because of an existing 
software integration partner- 
ship between BMC and Cern- 
er, Furmanski said, adding that 





he expects to fully integrate 
Service Impact Manager with 
the E-Health system within 
three months. 

The new capabilities in Ser- 
vice Impact Manager 5.0 will 
“make BMC’s products more 
manageable in smaller bites,” 
said Dennis Gaughan, an ana- 
lyst at AMR Research Inc. in 
Boston. “BMC is trying to 
make the BSM concept not 
seem so daunting.” 

Tim Grieser, an analyst at 
IDC, agreed that the added 
ties between Service Impact 
Manager and other tools will 
be a big deal to IT managers. 
BMC “has discovered that 
IT does not want a rip-and- 
replace approach to products 
supporting the business im- 
pact of IT,” Grieser said. 

CA, HP and IBM’s Tivoli 
Software unit have launched 
technology initiatives similar 
to BSM, but Grieser said BMC 
has moved more quickly to 
flesh out its offering than its 
competitors have. “BSM is a 
real thing and not a marketing 
position,” he said. @ 50096 
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Intel Shelves Plans 
For 4-GHz Pentium 


Intel Corp. said it no longer plans 
to release a 4-GHz version of its 
Pentium 4 processor, having de- 
cided instead to realign its engi- 
neers around new priorities such 
as the development of multicore 
chips. The 4-GHz Pentium 4 orig 
inally was due by year’s end but 
had been delayed until the first 
quarter of 2005. intel said it will 
now also focus more on steps 
such as expanding the cache 
memory built into the processors. 


Sun Reports Q1 
Loss on Charges . . . 


Sun Microsystems Inc. reported 

a loss for its first quarter, which 
ended Sept. 26. Sun said it would 
have had a $13 million profit if not 
for investment losses and restruc- 
turing and legal charges. Revenue 
was up 4% year over year but fell 
short of analysts’ expectations. 


GTS 


... And Ships JDS 
Suite for Solaris 


Sun has released a version of its 
Java Desktop System software 
for the Solaris x86 operating sys- 
tem. The new release, which sup- 
ports Sun’s Opteron-based work- 
stations, is the first version of the 
desktop software suite to run on 
Solaris instead of SUSE Linux. 
But some of the features that are 
in the Linux version aren’t avail- 
able in the first Solaris release. 


Short Takes 


MICROSOFT CORP. today plans to 
release an upgrade of its Navision 
business applications that’s more 
tightly integrated with products 
such as Excel and SQL Server. 
... ORACLE CORP. urged users to 
apply database patches it issued 
in August, saying exploit code 
has been posted for some of 

the flaws. 
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IBM Adds 64-Way pSeries, iSeries 


‘Targets server consolidation as Power5 
achieves high-end performance levels 





BY PATRICK THIBODEAU 
BM LAST WEEK completed 
its lineup of servers 
based on its Power5 chips 
by adding high-end 

pSeries and iSeries models 

that can support up to 64 

processors, double the previ- 

ous threshold for CPUs. 

The systems are priced from 
$451,000 for an eight-way sys- 
tem to $4 million for a system 
with 64 processors, IBM said. 

The eServer p5-590 and p5- 
595 systems can run either Lin- 
ux or IBM’s AIX version of 
Unix. IBM said that when a 
server is equipped with AIX 
5.3, its processors can be split 
into as many as 10 partitions 
that can each run a copy of the 
operating system and handle 
different applications. 

Dan Olds, an analyst at 
Gabriel Consulting Group Inc. 
in Beaverton, Ore., said the 
key advantage of the p5 sys- 
tems for large IT shops is their 
virtualization management ca- 
pabilities. “Now you're talking 
about a large Unix server that 
is a heck of a lot more useful 
than they used to be,” he said. 

IBM’s eServer i5-595 system, 
the newest member of the 
iSeries line that was formerly 
known as the AS/400, runs the 
iS operating system that’s com- 
patible with OS/400 releases 
dating back to 1999, The i5 also 
runs AIX, Windows and Linux. 


Better App Management 
An early i5 adopter, Beverly 
Russell, IT director at E.D. 
Smith & Sons Ltd., a food 
products manufacturer in 
Winona, Ontario, is using a 
two-processor system to run 
compute-intensive business 
intelligence applications. Rus- 
sell noted that the system’s 
virtualization capabilities can 
manage application resources 
at the microprocessor level. 
In one instance, the i5 shift- 
ed computing resources from 
one partition to another but 
carefully managed the reallo- 








cation, “never taking it down 
to the minimum where the 
performance will be impact- 
ed,” Russell said. The Power5 
processors also boost applica- 
tion performance, she said. 

Clay Ryder, an analyst at 
The Sageza Group Inc. in 
Union City, Calif., said boost- 
ing the iSeries capacity to 64 
processors creates “an awful 
lot of horsepower” for a sys- 
tem that has long been aimed 
at midsize companies. “It’s 
kind of hard to not think about 
it as a kind of a miniframe,” 
said Ryder, who sees the i5 
systems being adopted for 
server consolidations. 





Power5 Systems 


« IBM completed its 
Power5 lineup in its pSeries 
and iSeries systems. There 
are a number of configurations. 
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@ IBM will continue to sell 


m The pSeries and iSeries 
can be sold with on-demand 


@ The systems will ship 


Business Objects Takes 
Next Step on BI Integration 


BY HEATHER HAVENSTEIN 
Business Objects SA last week 
began shipping a beta version 
of a business intelligence soft- 
ware upgrade that expands the 
ties between its data analysis 
tools and the reporting tech- 
nology that the company ac- 
quired when it bought Crystal 
Decisions Inc. 

The new release, called 
BusinessObjects 11, will knit 
together query and analysis, 
reporting, business scorecard- 
ing and executive dashboard 
tools, plus underly- 
ing data integra- 
tion technology, on 
a single software 
platform. Lance 
Walter, vice presi- 
dent of product 
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year. The front-end links in- 
clude a unified software portal 
and common Web services ap- 
plication programming inter- 
faces, said Walter, who added 
that they let users move seam- 
lessly between Crystal-gener- 
ated reports and analytical ap- 
plications built around Busi- 
ness Objects’ tools. 

The back-end connections 
included in BusinessObjects ll 
will provide a unified infra- 
structure for integrating data 
and managing metadata, said 
IDC analyst Dan 
Vesset. The ability 
to manage the vari- 
ous business intelli- 
gence tools as a sin- 
gle platform could 
help users lower IT 


marketing at Business Objects | costs, he said. “At the end of 
in San Jose, said general avail- the day, you have one BI suite 


ability is expected by the end 
of the year. 

In June, Business Objects 
began shipping an upgrade 
that provided front-end inte- 
gration between its software 
and the reporting tools devel- 
oped by Crystal Decisions, 
which it acquired late last 


| that addresses the needs of a 
broad range of users,” he noted. 


Emergency Medical Associ- 
ates, a Livingston, NJ.-based 
emergency-room staffing 
company, uses Business 
Objects’ Application Founda- 
tion framework to deliver 
electronic patient records 





Jean Bozman, an analyst at 
IDC, said IBM is bringing out 
the systems at a time when iT 
managers are once again start- 
ing to buy high-end systems. 
Interest in low-cost servers 
isn’t waning at all, Bozman 
said. But she added that many 
companies are interested in 
improving server utilization 
by consolidating applications 
onto larger machines. 

IBM officials said the new 
systems are three times faster 
than their predecessors in the 
Regatta line, and they cost 
40% less than the Regatta 
products. It also maintained 
that the new systems offer 
better pricing and perfor- 
mance than rival products do, 
but analysts said that’s a race 
that never ends. @ 50109 


that are stored in a data ware- 
house to end-user dashboards. 
EMA, which added Crystal’s 
reporting tools to its business 
intelligence infrastructure 
before the acquisition, has 
signed on to beta-test Busi- 
nessObjects ll. 

Jonathan Rothman, EMA’s 
director of data management, 
said he currently has to use 
data extraction, transforma- 
tion and loading tools to move 
operational data into the data 
warehouse and connect it to 
the company’s Business Ob- 
jects applications. With Busi- 
nessObjects Ll, he said, “I’ll be 
able to take the Crystal re- 
ports themselves and just put 
them into Application Foun- 
dation and have those point to 
the operational data source.” 

The beta release keeps Busi- 
ness Objects on target to meet 
the road map it laid out in Jan- 
uary for integrating the two 
product lines, said Mike Schiff, 
an analyst at Current Analysis 
Inc. in Sterling, Va. 

Next year, Business Objects 
plans to complete the integra- 
tion process by releasing Busi- 
nessObjects 12, a new suite 
that company officials said 
will expand the functionality 
of all its current products. 


@ 50112 
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L.A. Finds PeopleSoft Better 
The Second Time Around 


City applies lessons 


learned from a 


disastrous past supply chain project 





BY MARC L. SONGINI 
LOS ANGELES 
HE SECOND major 
rollout of PeopleSoft 
Inc. software by the 
city government 
here is proving far less trou- 
blesome than the first People- 
Soft rollout four years ago, 
when an implementation was 
bogged down with internal re- 
sistance and inadequate train- 
ing, among other problems. 
This time, said city officials, 
end users have been convinced 
that the supply chain software 
coming in will make life better 
for them. Installation of Peo- 
pleSoft’s Enterprise 8.8 e-pro- 
curement and strategic suppli- 
er software is slated to be com- 
pleted in February. The new 
version promises significant 
changes for users, since the 





city government will be able to 
handle supplier transactions 
directly over the Internet. 
“Change is a lot easier when 
people trust that you are not 
doing anything that will hurt 
them,” said Robert Jensen, as- 
sistant general manager in the 
Los Angeles municipal gov- 
ernment’s Department of Gen- 
eral Services. Jensen and 
members of his staff spoke 
with Computerworld last week 
to detail the implementation 
and describe how officials 
avoided the problems caused 
by the 200] installation. 
Jensen said his department, 
the project sponsor, learned the 
hard way that it makes a differ- 
ence when users “know that 
you are looking out for them 
and trying to make their work 
easier and more manageable.” 





Even the tone is different 
this time around: Meetings 
held with department heads 
are now “well received,” he 
said. It was quite different a 
few years ago, when a number 
of users were hostile to an 
$11 million PeopleSoft supply 
chain management software 


# L.A. LEARNED to get user buy-in 


for its second PeopleSoft project. 





implementation [QuickLink 
20455] that changed the au- 
thority and responsibilities of 
many city workers. “We ail 
shared the pain,” Jensen said. 

Using the direct-connect 
methodology in Version 8.8, 
buyers will, for example, be 
able to go directly to the Of- 
fice Depot Web site, grab in- 
ventory data and use it to pop- 
ulate the city’s own purchase- 
order documents online. 

About 35% of the city’s pro- 
curement will be automated in 
that way, reducing the amount 
of manual data entry needed 
and streamlining the process, 
Jensen said. 

The new software will also 
help reduce the number of big- 
ticket items the city has on 
hand, such as computers and 
related equipment. Rather than 
warehouse those items, the city 
can ensure that its vendors will 
have stock nearby and thus be 
able to deliver it the next day. 





PeopleSoft Product Exec 
Follows CEO Out the Door 


BY MARC L. SONGINI 
Just two weeks after People- 
Soft Inc. ousted former CEO 
Craig Conway, the business 
applications vendor said that 
another top executive — Ram 
Gupta, who had been execu- 
tive vice president of products 
and technology — has left the 
company. 

PeopleSoft spokesman Steve 
Swasey last week confirmed 
Gupta’s exit from 
the company but de- 
clined to disclose = ‘ 
any details, leaving a 
it unclear whether ee 
Gupta was fired or 
left voluntarily. “We 
don’t discuss the de- 
parture of employ- 
ees and personal 
employee business,” 
Swasey said. 
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Gupta was the executive in 
charge of integrating People- 
Soft’s applications and the 
software developed by J.D. 
Edwards & Co., which People- 
Soft acquired last year. In an 
interview with Computerworld 
in August, Gupta said the 
merger had provided J.D. Ed- 
wards users with more prod- 
uct choices and better techni- 
cal support offerings [Quick- 
Link 48964]. 

But many J.D. 
Edwards users have 
said that life under 
PeopleSoft’s owner- 
ship has been a 
mixed bag and that 
they remain uncon- 
vinced about the 
benefits of the ac- 
quisition. And dur- 
ing his keynote 


TA’s exit 





speech at PeopileSoft’s Con- 
nect 2004 user conference the 
week before he was fired, 
Conway acknowledged that 
the company had made well- 
intentioned errors while try- 
ing to implement some of its 
software licensing and up- 
grade policies with the J.D. 
Edwards user base. 

PeopleSoft’s board removed 
Conway from his position as 
president and CEO on Oct. 1, 
saying that it had lost confi- 
dence in his ability to lead the 
company. Co-founder Dave 
Duffield, who had given up the 
CEO job to Conway in 1999, 
was brought back to run the 
software vendor. 

Stan Swete, who worked as 
an executive at PeopleSoft be- 
tween 1992 and 2002 and was 
one of the principal architects 
of its flagship PeopleSoft 8 
product line, was hired to 
replace Gupta, according to 
Swasey. He said Swete’s re- 
turn to the company demon- 


strates Duffield’s commitment 
“to re-energize PeopleSoft’s 
innovation and technology 
development.” 

John Moore, an analyst at 
ARC Advisory Group Inc. in 
Dedham, Mass., said Gupta’s 
departure was more a matter 
of when than if following 
Duffield’s return and the ap- 
pointment of PeopleSoft board 
member Aneel Bhusri as vice 
chairman with responsibility 
for the company’s product and 
technology strategy. 

An open question is whether 
an 18-month-old initiative for 
simplifying installation and 
management of PeopleSoft’s 
applications will now fade 
away, Moore said. Conway and 
Gupta had championed the 
Total Ownership Experience 
initiative. The simplification 
strategy was well received by 
users, Moore said, but he 
added that as a way of gaining 
new business for PeopleSoft, 
“it fell flat.” @ 50100 
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In addition, strategic sourcing 
software will allow the general 
services department to pull in 
vendor solicitations from all 
over the Web and get the best 
discounts. 

Yet those changes haven’t 
caused a repeat of the morale 
woes of 2001. 

In an effort to ensure proj- 
ect success, the general ser- 
vices department will spend 
money upfront for change 
management to make sure 
changes are communicated to 
city personnel and adequate 
training on the new system is 
provided prior to the rollout. 


Hard Lesson 


Officials said that communica- 
tion strategy results from a 
hard lesson learned from the 
initial rollout — good change 
management requires a plan 
that identifies anyone on the 
city workforce whose role can 
change because of the new 
software. 

“The plan needs to identify 
champions, owners, stake- 
holders and users and what 
and when you will communi- 
cate with them and the media 
used for that communication,” 
Jensen explained. “The other 
part is how to self-motivate 
these folks to want to spread 
the word that the change is 
good and should be supported.” 

There wasn’t adequate plan- 
ning in 2000, Jensen said, and a 
lack of communication with 
city personnel caused signifi- 
cant resistance from users, par- 
ticularly in those departments 
where the PeopleSoft applica- 
tions caused employees to lose 
application support, personnel 
and buying authority. 

“We weren’t popular,” Jen- 
sen said. “Change is hard, so 
the police and fire and sanita- 
tion departments were leading 
the charge to go back to the 
thrilling days of yesteryear.” 

It took almost four years, 
Jensen said, but the planning 
effort for the latest implemen- 
tation has encountered little 
resistance so far. @ 50106 


FIXING A SOFTWARE MESS 


Jensen explains how L.A. was able to 
convert user resistance into support: 


QuickLink 50107 
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“For midsized and large organizations, a significant 
Linux deployment will neither be free nor easily 
accomplished. In fact, respondents at large 
organizations reported that a wholesale switch to 
Linux from Windows” or Unix would significantly 
increase TCO for the forseeable future.” 


—Laura DiDio, The Yankee Group, April 2004 
Linux, Unix, and Windows TCO Comparison 


The Yankee Group, a global research and consulting firm, concluded 
that a significant switch to Linux from Windows or Unix could cost three 
to four times as much without delivering tangibly better performance or 
business value. These findings are based on a non-sponsored worldwide 
survey of 1,000 IT administrators and C-level executives in midsized 


and large enterprises. 


To get the full study, visit microsoft.com/getthefacts 
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HOW CLOSE ARE YOU TO THE Bileotece 
NEXT GENERATION OF NETWORKING? jeu 


THE ANSWER IS JUST BENEATH THE SURFACE 


Within your desktops, notebooks, switches and servers are chips enabling your business to operate in real time, delivering Gigabit 
speed both reliably and securely. When the top 10 computer and networking equipment brands need unsurpassed performance, 
they turn to us.' Broadcom® chips are two to three times faster than the closest competitor’s in delivering network throughput on 
your demanding applications.* Whether you’re wired or wireless, networking hardware built with Broadcom technology ensures 
the devices you use today—as well as those you add tomorrow—will connect easily and seamlessly across air, fiber and copper. 
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Learn how building upon Broadcom® chips 
end-to-end can provide you with faster network 
performance. Download the latest update of our 
e-book, “Architecting Next-Generation Networks,” 
now at www.gobroadcom.com/ebook 
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Kumar Launches IT Investment Firm 


BY SCARLETT PRUITT 
CANNES, FRANCE 
Sanjay Kumar, the former 
chairman and CEO of Com- 
puter Associates International 
Inc., made a surprise appear- 
ance at the ETRE 2004 confer- 
ence here last Monday, three 
weeks after he was 
indicted in U.S. Dis- 
trict Court for secu- 
rities fraud and ob- 
struction of justice. 
Kumar, who is 
charged with taking 
part in a fraudulent 
accounting scheme 
at CA during 1999 
and 2000, wasn’t list- 
ed as a speaker on 
the conference’s pre- 


e 
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liminary agenda. He didn’t 
comment directly about his in- 
dictment, but he described his 
departure from CA in June af- 
ter 17 years with the software 


| vendor as the start of anew 


chapter in his life. 

“There are still tremendous- 
ly exciting things to 
do,” Kumar told the 
audience of IT in- 
dustry executives 
and venture capital- 
ists. “I’m focused on 
building new tech- 
nology companies 
today.” He said he 
hopes to mentor 
start-ups, adding 
that emerging tech- 
nologies such as 


voice-over-IP telephony are 
creating marketing opportuni- 
ties for vendors. 

In a follow-up interview, 
Kumar said he attended the 
ETRE conference to network 
and to hunt for companies to 
invest in. He said that after 
leaving CA, he took a vacation, 
thought about what he wanted 
to do and decided to launch a 
technology investment firm. “I 
think it’s a really good way to 
give back to the industry and 
create jobs,” Kumar said. 


Advice ‘On Demand’ 
OnDemand Partners LLC, 
which he started two months 
ago with a group of other IT 
veterans, offers advice, money 


and development support to 
start-ups. Kumar said that 
because of his background 

in enterprise software and 
his endorsement of subscrip- 
tion-based pricing approach- 
es, he is focusing on those 
two areas. 

The Locust Valley, N-Y.- 
based firm’s name is a play on 
words that refers to both on- 
demand computing and the 
way in which the company’s 
partners will step in to help 
companies “on demand,” Ku- 
mar said. OnDemand Partners 
currently is working with 14 
vendors and is on the lookout 
for more, he added. 

Kumar was indicted last 
month by a federal grand jury 
in Brooklyn, N.Y., for allegedly 
participating in an accounting 
scheme at CA. Prosecutors 





charged that CA adopted a so- 
called 35-day month account- 
ing policy, under which some 
sales contracts that were 
signed after a fiscal quarter 
had ended were backdated so 
that they appeared to have 
been completed during the 
quarter [QuickLink 49647]. 

Stephen Richards, CA's for- 
mer head of worldwide sales, 
was also indicted. Both Kumar 
and Richards pleaded not 
guilty. Their indictments 
were announced on the same 
day that CA agreed to pay 
$225 million to reimburse 
shareholders for the alleged 
fraud as part of a settlement 
deal with the U.S. Department 
of Justice. @ 50086 


Pruitt is a reporter for the 
IDG News Service. 





Continued from page 1 
Sarb-Ox 


Todd Naughton, vice presi- 
dent and controller at Zebra 
Technologies Corp., said the 
Vernon Hills, Ill.-based sup- 
plier of printer components 
“really just started looking” at 
general IT controls within the 
past three months. 

For the past year, Zebra has 
focused on documenting, re- 
mediating and testing applica- 
tion-level controls throughout 
the organization, including 
mapping defined job roles to 
the system access levels they 
require, said Richard Jaszka, 
the company’s internal audit 
manager. 

“That said, we’re concerned 
about our ability to meet the 
Section 404 requirements of 


AT A GLANCE 


WHAT IT IS: The Sarbanes-Oxley 
Act requires most large companies 
to attest to the financial and IT con- 
trols they have in place for fiscal 
years that will end on or after Nov. 
15, 2004, in their annual reports. 


Ce eeereeccescuseseseseeses 


WHY IT MATTERS: Few IT staf- 
fers know much about the controls 





that support general IT activities. 
That is typically overseen by internal 
audit and/or T audit departments. 


| Sarbanes-Oxley for the other 


IT controls,” said Jaszka. For 
example, although Zebra has 
documented policies for key 
areas such as change manage- 
ment, systems development 
and mission-critical computer 
operations, “it will be a chal- 
lenge to properly test these 
controls and address any nec- 
essary remedies by year-end,” 
Jaszka said. 

He added that regulators 
haven't specified which IT 
controls need to be document- 
ed and tested. 


Compliance Gap 

Stan Lepeak, an analyst at 
Meta Group Inc., said he 
wouldn’t be surprised if 25% 
of accelerated filers are found 
to have inadequate controls. 
He based his estimate on sev- 
eral factors, including discus- 
sions with clients, Sarbanes- 
Oxley readiness surveys con- 
ducted with client firms, and 
concerns expressed by cus- 
tomers who outsource IT that 
service providers won't be 
able to document the IT con- 
trols in time. 

“Tt really depends on how 
strict external auditors will be 
in determining what are mate- 
rial weaknesses or deficien- 
cies in controls and what 
aren't,” said Lepeak. 

Herman Miller Inc., a Zee- 
land, Mich.-based maker of 





office furniture, decided this 
past spring to adopt a set of 
guidelines for evaluating IT 
controls called Control Objec- 
tives for Information and Re- 
lated Technologies, or Cobit, 
created by the IT Governance 
Institute and the Information 
Systems Audit and Control 
Association, both of which are 
based in Rolling Meadows, IIL. 
said Rich Russell, director of 
application development. 

“We worked with our audi- 
tors to determine which of the 
Cobit processes were in scope 
for [Section] 404 and then we 
focused on those,” said Rus- 
sell, whose company has until 
May 31, 2005, to attest to its IT 
and financial controls. 

Wyndham International Inc. 
has been working with several 
consulting firms since last 
year to document its IT con- 
trols, said Mark Hedley, senior 
vice president and chief tech- 
nology officer at the Dallas- 
based hotel chain. 

As a result, Wyndham “has 
very high confidence in our IT 
key internal controls that will 
receive the scrutiny of our 
Sarbanes audit team,” he said. 


@ 50093 


MORE ABOUT SARB-OX 

Documentation software helps cornpanies 

that have more time to comply: 
QuickLink 50068 
www.computerworld.com 





Later Timetable Gives Some 
Filers More Wiggle Room 


SOME COMPANIES that can 
wait until 2005 or later to meet 
the initial Section 404 require- 
ments of the Sarbanes-Oxley 
Act have already spent months 
working on IT control assess- 
ments and are well positioned 
to complete their documenta- 
tion and testing efforts ahead of 
schedule. 

For instance, Science Appli- 
cations International Corp. in 
San Diego began evaluating its 
IT controls in July 2003 and 
started documenting them last 
December - even though the re- 
search and engineering compa- 
ny doesn't have to attest to those 
controls until Jan. 31, 2006, said 
John R. Hartley, SAIC’s director 
of accounting operations. 

While SAIC isn’t an acceler- 
ated filer, “that doesn’t alter the 
priority, attention or resources 
that we place on our Sarbanes- 
Oxley activities,” said ClO Cora 
Carmody. “It has been, and will 
continue to be, my top priority 
in IT and the corporation’s top 
priority.” 

Herman Miller Inc., a maker 
of office furniture, began evalu- 
ating its IT controls in March and 


expects to finish internal testing 
by year's end. External auditors 
will conduct tests in February 
2005 to meet the May 31 dead- 
line, said Rich Russell, director 
of application development. 

“At the outset of our compli- 
ance efforts, we did not under- 
stand the requirements for IT 
controls - we were more fo- 
cused on application controls,” 
he said. Russell and his col- 
leagues discovered that IT is 
a foundational piece of Herman 
Miller's controls architecture 
after a more thorough study 
of the company’s IT control 
issues. 

Even though Portland Gener- 
al Electric Co. doesn’t have to 
meet its Section 404 require- 
ments until December 2005, 
the utility recently completed its 
IT control design assessment 
and is planning to begin testing 
those controls by the end of this 
month, said Ross Wescott, chief 
IT auditor at the Portland, Ore.- 
based electric utility. 

Said Wescott, “It is our goal 
to practice for a year, so when it 
comes to reality, we're ready.” 

- Thomas Hoffman 





Receive 
a FREE 
third-party 
case study 
on the benefits 
of InfraStruXure: 
Key Code 


http://promo.apc.com u601y 
(888) 289-APCC «3257 ¢ FAX: (401) 788-2797 


Arc 


Legendary Reliability® 


Free Case Study 


Receive a FREE third-party case study 
on the benefits of InfraStruXure: 


YES! Pease send me my FREE case stud 
NO, 


_| Yes! Send me more information via e-mail and sign me up for APC Powerltews e-mail newsletter. Key Code u601y 
What type of availability solution do you need? 


Purchase timeframe? 
You are (check 1): 





| NO POSTAGE 
NECESSARY 
rmaveo | | How to Contact APC 
UNITED STATES 
Call: 1-888-289-APCC 
| use the extension on the reverse side 


Fax: (401) 788-2797 
Visit: http://promo.apc.com 


use the key code on the reverse side 


BUSINESS REPLY MAIL 


FIRST-CLASS MAIL PERMIT NO. 36 WEST KINGSTON RI 
POSTAGE WILL BE PAID BY ADDRESSEE 


Arc 


ATTENTION CRC: u601y 
Department: C 

132 FAIRGROUNDS ROAD 
PO BOX 278 


WEST KINGSTON RI 02892-9920 Arc 


Legendary Reliability” 
WbesveedaVDeodaadeseebelbotecbelvcnlbbecebeleal Pee 





TUCO ee CoRR ee 


Nan Se Se ITEMS TUS a nn TCM 


eM 
ie WA meee 
cools hot chamber air a 
i 
aii 
Distribution 
eT mtg 18] ea 


InfoWorld 3/12/2004 


Part Number © Usable IT Racks kW per Rack Price All configurations feature: 


ISXT2MDGR 6 up to SkW 149,997 ov N+I power and cooling 


ISXTOMDI1R 1" up to 5kW 49,999 vf Secure, self-contained environment 


Wo Integrated management software 
ISXT2MD40R 40 upto5kW = %699,999" ; 
a Enhanced service package 


ISXT2MD100R 100 up to5kW = *1,649,999° 


Hi h D C fi ti shown above) 
ign Uensity Configuration shown ap , Infra stu) Cure 
ISXT2HD8R 8 upto 10kW ‘399,999 


ETE 


On-demand architecture Va anniat 
critical physical infrastructure 


Order your solution today. Call 888-289-APCC x3257. camana 
ae 


High density upgrades start at *10,999 
On-site power generation options start at *29,999 


_, Don't see the configuration you need? 


| Try APC’s online InfraStruXure” BuildOut Tool 
p-~ | today and you'll receive a FREE third-party case 
== | study on the benefits of InfraStruXure. 


Go to www.promo.ape.com and enter key code u60iy =| =: SS | 


Lk semen geeeenree sep emoneneen _} 
* Prices do not include IT equipment ** Install and delivery times may vary 


—— 
= 
i, ok 


What is 

data center 

on demand? 

Highly available and manageable, 
quick-to-install, scalable architecture 
that easily supports both standard- 
and high-density applications 


- Up to 20kW a rack 
- Unlimited racks 

- Ships in 5 days** 
- Installs in 1 day** 


- Optional on-site 
power generation 


- Raised floor optional 
Need a different configuration? 


Try our free online InfraStruXure™ 
BuildOut Tool to find out more 


Arc 


Legendary Reliability” 


©2004 American Power Conversion Corporation. All Trademarks are the property of their owners. E-mail: esupport@apcc.com * 132 Fairgrounds Road, West Kingston, R! 02892 USA !ISX4A4EF-USa 





Dillard’s department stores found a real bargain. 
Xerox assessed and streamlined their company-wide work 
processes and printing needs, saving them $1.6 million. 
There’s a new way to look at it. 


xerox.com/learn 1-800-ASK-XEROX ext. LEARN | Technology | Document Management | Consulting Services | 


© 2004 XEROX CORPORATION. All rights reserved. XEROX® and There's a new way to look at it are trademarks of XEROX CORPORATION 
Dillard's is a registered trademark of Dillard's Inc 





NEWS 


www.computerworld.com 





Oracle Exec Defends Pricing 
Policy on Multicore Systems 


BY THOMAS HOFFMAN 
The development of servers based on 
multicore processors, in which two or 
more CPUs are placed on a chip, has 
raised concerns among some IT man- 
agers that the new technology will result 
in significant software cost increases 
[QuickLink 49648]. Jacqueline Woods, 
vice president of global licensing and 
pricing strategy at Oracle Corp., dis- 
cussed the company’s multicore pricing 
plans with Computerworld this month. 


What is Oracle’s position on soft- 
ware licensing for dual-core proc- 
essors? We don’t have a posi- 
tion with respect to dual-core 
processors. A core is equal to a 
CPU, and all cores are required 
to be licensed. Therefore, you 
are required to have two proc- 
essor licenses. 


Does this represent a change in Oracle’s 
licensing policy? We have not changed. 
We have not increased our prices. At 
the end of the day, the consumption of 
the Oracle software is unchanged. 


Has multicore server software pricing be- 
come a contentious issue between Oracle 
and your customers? Not at all. IBM 

does not sell any single-core CPU ma- 
chines. All of their machines are dual- 
core and have been for some time. It’s 
particularly interesting that a hardware 
vendor that I won’t necessarily men- 
tion who came out with a [dual-core] 








UltraSparc III chip on a single wafer 
should try to change the way the soft- 
ware is licensed. When it was called 
into question, we clearly made sure 
that everyone understands that a core 
equals a processor. 


So if a user moves from a single-processor 

server to a two-way server, do they essen- 

tially have to pay double for software on the 

newer machine? If I have more proces- 

sors, do I pay more money? Yes. You 

have to pay for the one incremental 
processor that you have not li- 
censed. If you had a four-way 
node and you want to go to an 
eight-way, you need more incre- 
mental processors. Do you pay 
for eight processors? Yes. 


Some analysts and IT managers be- 

lieve that large software vendors like 

Oracle and IBM are taking advan- 
tage of multicore systems to drive higher 
revenues following a period of weak tech 
spending. How would you respond? That’s 
not an accurate statement. We have 
had this policy for years. We had it 
during the downturn, and we have it 
now. It hasn’t changed. If someone li- 
censed software on a dual-core ma- 
chine during the downturn, they paid 
for two processors. I don’t see the re- 
covery of the economy as an opportu- 
nity to leverage the advent of multi- 
core, considering this had been the 
same policy when the economy was 
worse off than it is now. @ 50053 





Coding Error Shuts Down PayPal 


BY TODD R. WEISS 
PayPal Inc.’s online payment Web site 
slowly returned to normal operations 
last week after an unspecified coding 
error virtually shut down the site for 
four days. 

The problems began on Oct. 8, 
when a failed routine monthly code 
update wreaked havoc for many eBay 
users who couldn’t make or collect 
payments. The PayPal.com Web site is 
owned by eBay Inc. 

Sara Bettencourt, a spokeswoman for 
San Jose-based PayPal, said the compa- 
ny doesn’t know how many users were 
affected. After PayPal and eBay engi- 
neers worked around the clock for 
days early last week fixing the prob- 
lem, Bettencourt said, the system was 
allowing “most users to transact with- 





out incident.” She wouldn't disclose 
the type of coding error. 

PayPal.com has about 50 million 
user accounts, 15.5 million of which 
are active, Bettencourt said. Account 
data and personal information weren’t 
compromised, according to PayPal. 

A Virginia-based eBay seller, who 
asked that his name not be used, said 
he wasn’t sure whether the glitches 
with PayPal.com reduced his sales over 
the weekend of the failure. But he not- 
ed that the upgrade problems are remi- 
niscent of frustrating incidents he has 
experienced with eBay site changes 
that were touted as “improvements.” 

“EBay would change formats on the 
site and had the same problem” with 
users having difficulty logging in and 
making purchases, he said. @ 50059 
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Dillard’s department stores hire over 10,000 people a 
year. Storing and retrieving application, training and 
benefits packets had become costly. So Dillard’s bought 
into something smart: a Xerox Office Document 
Assessment (ODA). 

Xerox examined their work process across all 
14 Dillard’s business units and recommended key 
improvements. 

First, all analog copiers, stand-alone printers 
and fax machines were replaced by Xerox 
DocumentCentre® multifunction systems. Then Xerox 
DocuShare’ was installed on Dillard’s network. 

This cross-platform document system, along with Xerox 
imaging software, digitized key business processes. 

Now, instead of storing and distributing hard copy 
documents with each new hire, store managers go 
online for hiring packets and print forms on the spot. 
No paper inventory. No outdated information. $1.6 
million saved. To see what you can save, call us or visit 


our website. 


xerox.com/learn 
1-800-ASK-XEROX ext. LEARN 


XEROX. 
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OPINION 





DON TENNANT 


Expect Not 


HERE’S A SCHOOL OF THOUGHT that 
says you should keep people’s expecta- 
tions of you very low. That way, if you 
ever accomplish anything even margin- 
ally above average, they’ll be really im- 
pressed. Sun Microsystems and Microsoft probably 
would have done us all a favor if they’d followed that 


advice last April. 


As you may recall, that 
was when Sun and Micro- 
soft proclaimed that they 
had settled all their dif- 
ferences and that a new 
era of cooperation had 
dawned. The quote attrib- 
uted by Sun’s PR machine 
to CEO Scott McNealy, 
while a little stilted, con- 
veyed a collaborative spir- 
it that was full of promise: 

“This agreement will be of 

significant benefit to both 

Sun and Microsoft cus- 5 
tomers. It will stimulate new products, 
delivering great new choices for cus- 
tomers who want to combine server 
products from multiple vendors and 
achieve seamless computing in a het- 
erogeneous computing environment.” 

Now that we’ve passed the six- 
month mark, I thought it would be 
worthwhile to find out exactly how 
those customers have benefited since 
the Great Pronouncement. So last 
week I asked John Loiacono, executive 
vice president of Sun’s software group, 
how the deal had changed things. 

“Our conversations with customers 
have changed pretty dramatically, in 
that it used to be we had to say bad 
words every time we mentioned Mi- 
crosoft,” Loiacono responded. “The 
fact is, we no longer have to do that be- 
cause we’re doing a lot more coopera- 
tive work with them versus what we 
were doing previously.” 

Let me get this straight: What has 
changed is that Sun doesn’t use bad 
words when it talks about Microsoft 
anymore. Well, that’s just delightful. 
But I was hoping to hear something a 
tad more related to what users have 
gained, so I pressed him a little. Loia- 
cono’s response: “You will see from us 





within the next 90 days or 
so that we will not just be 
talking about generic con- 
cepts, but actually talking 
more specifically about 
things we’re doing with Mi- 
crosoft and actually show- 
ing some examples of prog- 
ress that we’ve made.” 
Ninety days? Interesting. 
McNealy had said at Java- 
One in June that the com- 
panies would detail their 
collaborative work during 
== the summer, and that didn’t 
Nn Then, last month, Mark Mc- 
Clain, vice president of software mar- 
keting at Sun, said there would be 
some sort of interoperability an- 
nouncement this month [QuickLink 
49414]. We can give Sun and Microsoft 
the benefit of the doubt and presume 
that will still happen (Microsoft may 
well be the chief foot-dragger here), 





although Loiacono’s “within the next 
90 days or so” comment last week sug- 
gested that anything really substantive 
might be a little further out. 

Unfortunately, the only thing we 
know now that we didn’t know in 
April is that the Sun-Microsoft agree- 
ment included a provision (kept quiet 
by both companies at the time) under 
which Microsoft can sue users and 
distributors of OpenOffice, the open- 
source office suite that Sun acquired 
from a German outfit in 1999 and re- 
leased to the open-source community 
the following year. But users of Star- 
Office, Sun’s commercial distribution 
of OpenOffice, are protected against 
legal liability [QuickLink 49495]. That 
revelation came in an SEC filing on 
Sept. 13, and it seems fairly self-serving 
on Sun’s part. Anyone who was think- 
ing about using or distributing a re- 
lease of OpenOffice other than Star- 
Office might well be having second 
thoughts. So much for community 
support. 

Then again, Sun got almost $2 billion 
from Microsoft when it signed that 
agreement in April, so it had a lot of in- 
centive to be as agreeable as possible, 
regardless of the impact on anyone else. 
What would you expect? @ 50065 
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MICHAEL GARTENBERG 


Unbelievable, 
Scary Babble 
About USB 


T SEEMS THAT every 

week, I open the paper or 

click on a URL and see the 
same story: Someone is jump- 


ing on the bandwagon to tell 
the horror tale of the potentially scary 
Universal Serial Bus port. They talk 
about the security threat represented 
by the iPod and other portable media 
players and by ubiquitous USB flash 
memory devices. The rhetoric has 
reached new highs, and IT depart- 
ments are being told to ban all devices 
of this type and immediately lock 
down the USB ports 

on all machines. 

This rhetoric 
amounts to another 
kind of USB: “Unbe- 
lievable, Scary Bab- 
ble.” Concerns about 
the security of re- 
movable media 
aren’t new, and nei- 
ther is removable 
storage itself. Any 
IT staffers for whom 
this is suddenly an 
issue must have en- 
tered the industry 
directly from the 
proverbial turnip 
truck. 

Some of you might 
even remember 
when all PCs came 
with removable stor- 
age devices called floppy disks. And at 
a time when a hard disk could store no 
more than 20MB and files tended to be 
a lot smaller than they are today, a per- 
son could carry quite a lot of sensitive 
data on just a few floppies. Really, this 
issue dates to when it was first possi- 
ble to cheaply copy sensitive docu- 
ments on a Xerox machine. 

Security was an issue then, and it’s 
an issue now. Scare rhetoric doesn’t 
help anything; it just gets the folks 
with the scariest rhetoric some head- 
lines. My favorite line in one recent 
horror tale was about the fear that in- 
fected PDAs syncing to a corporate 
computer could pass nefarious code on 
to the corporate network. Of course, 
we know that unless the PDA is run- 
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ning the same operating system as the 
syncing computer, it won't do any 
harm at all. (Well, unless the PDA was 
created by Jeff Goldblum — you know, 
the guy in the movie Independence Day 
who somehow sends a computer virus 
from his PowerBook to the aliens’ 
mother ship computer, which was for- 
tunately not only compatible but also 
apparently insecure and buggy. Per- 
haps they left all the USB ports open.) 

What you need to do is balance 
users’ needs with security concerns. 
The benefits that users derive from 
carrying relevant portions of their 
desktops on portable memory devices 
are simply too great for IT depart- 
ments to ignore. Your response should 
involve safe computing policies, educa- 
tion and clear rules on what can be 
taken off-site. And businesses should 
set policies on segregating personal 
data from corporate machines. IT de- 
partments must make sure users un- 
derstand the need to safeguard sensi- 
tive information, whether it’s in digital 
format or on paper. 

Legitimate security concerns sur- 
round removable media, including 
the potential for corporate data theft 
and virus attacks. Simplistic responses 
like blaming the USB port or flash 
memory devices aren’t the answer. 
“Lock it all down and take it all away” 
isn’t a new philosophy, and it has failed 
time and again. 

Recognizing and accommodating 
user needs takes more work, but in the 
end, the results are worth it. @ 49896 


VIRGINIA ROBBINS 


Self-service 
With a Smile 


ECENTLY, it’s felt as if 

my entire life has been 

spent in airports. The 
airline I take most often is 
one of those low-cost peanut 


tossers that specializes in self- 
service. After logging over 80 flights in 
the past year, I remain a fan of this air- 
line. It’s been just about a year since 
I’ve had to interact with anyone at the 
entire company other than to give my 
drink order or to wish someone a good 
day as I deplaned. It’s been great. 

Well, except for the time I arrived an 
hour after my flight had left. The next 
plane to Oakland was scheduled to 
leave in 12 minutes; the one after that 
would land at close to midnight. The 


| 
| 
j 
| 





customer service agent 
asked me if I was willing to 
run through the airport. 

Running seemed better 
than missing dinner, so after 
he quickly rebooked me, he 
grabbed my bag, and off we 
went. We cleared security 
in record time by using the 
special employee line. My 
gate was at the far end of 
the terminal (of course). 

Once we passed into his 

airline’s area, the other gate 

agents started cheering him 

on: “Go, Bradley! Go, Bradley!” He 

got me to the plane with three minutes 
to spare. 

As the door closed behind me, I was 
nearly out of breath but happy at the 
thought that I'd be home for dinner. 

Exceeding expectations is a chal- 
lenge in today’s automated world of 
self-service. If Bradley hadn’t been 
overseeing the self-service kiosks, my 
experience on this trip would have 
been very different. 

My grocery store has replaced its 


| 
| 


express lanes with self- 
service checkout stations. 
The first month the sta- 
tions were available, only a 
few brave shoppers used 
them. 
The first time I tried it, 
the station got stuck in 
some infinite loop, and I 
ended up grabbing a clerk 
to help me. It turned out 
that because the previous 
transaction had been for 
beer, the station needed 
to know whether I could 
hase alcohol before it could 
proceed. I don’t know if it’s a good 
thing or a bad thing that I’m clearly 
over 21, but the clerk entered the code, 


and I continued scanning my groceries. 


A few weeks later, I was back in the 
store and saw an employee station lo- 
cated in the middle of the self-service 
area. The same clerk who had helped 
me was now darting among the sta- 
tions helping shoppers. 

I also noticed that a lot more people 


| were using self-service; a long but 
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| quickly moving line had formed in 
front of the four stations. 


As a customer, I like self-service; it’s 
faster and I’m in control. And as a CIO, 
self-service is one more way I can help 
my company reduce expenses by using 
technology. 

But the reality is that customers 


| sometimes need someone else to take 


control. At some point, the cost of 
programming for each possible cus- 


| tomer interaction outweighs the cost 


of inserting an employee into the 
transaction. Assuming that the folks 


| in marketing want high levels of cus- 


| tomer satisfaction, creating ways for 
| skilled humans to intervene is re- 
| quired. 


I'd like to hear your stories. Send me 


| your best or worst experiences with 
| self-service, either as a provider or as a 
| customer, and I'll share the results next 


| month. @ 49979 
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More columnists and links to archives of previous 
columns are on our Web site 


| www.computerworld.com/columns 


COULDN'T DISAGREE MORE 

with the column “Wireless World 
Needs a Directory” [QuickLink 
48752]. | like that my number isn’t 
published anywhere. Like a growing 
number of people, I've abandoned 


| give my number to. | appreciate 
that no one can just look up my 


number. Should this change, maybe | 
| clone your cell number and bill their 
| Calls to it because you answered 


I'll switch to VoIP. 

Les Bower 

Systems administrator, 
Orefield, Pa. 


a IRELESS WORLD NEEDS 
a Directory”? As was 
said in another context, “This is 
the worst idea in the long, sad his- 
tory of bad ideas.” There is too 
much sharing of personal informa- 
tion. I'll publish my cell phone 
number when every telemarketer 
and spammer (remember, cell 
phones get e-mail too) has been 
eliminated! 
Matt Fleming 
Network administrator, 
Cincinnati 


0, THE WIRELESS WORLD 
doesn't need a directory. Wire- 
less is a special case because you 





pay for everything - incoming, out- 


going, text, voice, etc. Robert 
| Mitchel! should use his soapbox to 
| lobby for no-cost incoming wireless 


calls and messages. There should 


| be no cell phone directory. Not until 
my land-line phone. | choose whom | 
market. Not until incoming calls and 


no one, not even charities, can tele- 


text messages are free across the 
board. And not until no one can 


something that looked familiar and 
you were wrong. 

At the risk of being labeled a 
crank, | will speak out against a cell 


| phone directory until all incoming 


minutes on all wireless plans are 


| free. Yes, | did read Jay Cline’s en- 
| tire article as well [“Cell Phone Di- 


rectory Rings True,” QuickLink 
49184], and | understand that it will 
be opt-in at first, with only new cus- 
tomers having to opt out. But how 
long will it be before companies 
start charging to opt out? And what 
constitutes a new customer? 

| have been going month-to- 
month with my carrier for a while 
now. Today, | entered into a con- 
tract for a year to take advantage of 
a deal. The provider could argue 
that since the contract is new, even 





| though the account is not, it con- 


stitutes new service. 

B.A. Clouse 

Education program manager, 
Baltimore, 
bamyclouse@hotmail.com 
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| Don’t Forget Alpha 


HANKS for the coverage of the 

VAX and VMS community, 
which tends to be ignored these 
days, and for the positive words 
about the future of VMS on Itanium. 
Too many people mistakenly think 
VMS died long ago. 

But I'm amazed that the article 
[“VAX Users See the Writing on the 
Wall,” QuickLink 47934] never men- 
tioned Alpha. The path of least resis- 
tance (and least expense) for most 
VAX users has been to retain their ex- 
isting software and migrate to newer 
Alpha hardware, still running the 
VMS operating system. In most cas- 
es, it's been “recompile, relink and 
go” for their programs, but in cases 


where source code has been lost, the | 


VEST utility is used to convert a VAX 
binary image to an Alpha one. 
Some VAX users may choose to 
move straight from VAX to Itanium, 
skipping Alpha entirely. But HP still 
develops and sells Alpha systems 
(and will through at least 2006) and 





will support them for a minimum of 
five years after last sale, whenever 
that occurs. For most VAX users, 
moving to Windows, Unix or Linux 
involves very costly code rewrites or 


| wholesale replacement of applica- 


tions, and they tend to find that those 
platforms don’t provide the stability, 


| reliability, high availability, security 


(there are no viruses on VMS, for ex- 


| ample), low system administrator 
| workload and low TCO that they 
| have become accustomed to with 


VMS. So for most VAX users today, 


sticking with VMS and simply mov- 
| ing to newer hardware (including Al- 
| pha) is the lowest-cost, lowest-effort 


and least-risky option to consider. 


| Keith Parris 
Colorado Springs 


| COMPUTERWORLD welcomes 


comments from its readers. Letters 
will be edited for brevity and clarity. 
They should be addressed to 
Jamie Eckle, letters editor, Com- 
puterworld, PO Box 9171, 1 Speen 
Street, Framingham, Mass. 01701. 
Fax: (508) 879-4843. E-mail: 


| letters@computerworld.com. 


Include an address and phone 
number for immediate verification. 


For more letters on these and 
other topics, go to 


| www.computerworld.com/letters 
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WebSphere MIDDLEWARE IS IBM SOFTWARE. WebSphere Portal 


part of tne IBM Workplace Family, connects partners 
1. Sales associate checks online inventory. employees, and customers worldwide. It's how to access 
2. Manager uploads revenue goals. multiple applications on one screen and on virtually any 
3. Supervisor gets employee overtime info. kind of device. An end-to-end solution that helps improve 
4. Cashier IMs downtown store location. productivity and reduce costs as it enables on demand 
5. Everyone accessing info via one portal. business. It's an accessory that you just can't live without. 
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Business application software seldom 
fulfills its promises. In fact, installing 
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E'VOTEAT RISK 


HIS NOVEMBER, aS many 
as 50 million Americans 
could vote for president 
using some form of elec- 
tronic touch-screen sys- 
tem, the vast majority of 
which have been designed 
by McKinney, Texas-based Diebold 
Election Systems. That has some IT 
and security researchers holding 
their breath because of the faulty 
track record of Diebold’s technolo- 
gy and a government-endorsed 
testing and certification process 
that they say is deeply flawed. 
Those critics say that direct 
recording electronic (DRE) voting 
systems remain vulnerable to ma- 
nipulation and malfunction, partic- 


errrrrir irre titer 


Sewer eeteweseeeeeseeyense 


Despite vendor assurances, researchers 


remain concerned about the security and reliability 


of electronic voting systems. BY DAN VERTON 


ularly in states that have ignored 
some recommendations of indepen- 
dent researchers, like Maryland has. 
State election officials, on the 
other hand, say they are confident 


: that appropriate safeguards are in 


place to ensure the security and ac- 
curacy of the 2004 vote. 

Among the most pressing issues 
cited by critics are a lack of techni- 
cal standards governing DRE soft- 
ware development, the failure of 


the government to impose trans- 
parency on the software testing and 
certification process, and the lack 
of technical security knowledge 
throughout the many state and lo- 
cal jurisdictions that oversee elec- 
tions where DREs will be used. 
Johns Hopkins University pro- 
fessor Aviel Rubin, who last year 
published a study of portions of 
the Diebold software code, says 
the quality of that code was below 


10.18.04 


minimum standards for a produc- 
tion system. Rubin’s report cites a 
lack of industry-standard change- 
control processes and documenta- 
tion, as well as specific technical 
weaknesses. 

Jonathan Gossels, founder of 
SystemExperts Corp. in Sudbury, 
Mass., says his review of the Die- 
bold code showed that it was “ama- 
teurish” in its design. More impor- 
tant, the amount of code that has 
been studied and found wanting “is 
only the tip of the iceberg” of the 
millions of lines of C++ and Micro- 
soft Windows-based code that 
powers the Diebold touch-screen 
systems and back-end management 
servers, says Gossels. 
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The testing procedures of vendors, 
particularly Diebold, are also under 
suspicion. Jerry Rudisin, CEO of Agitar 
Software Inc., a software testing com- 
pany in Mountain View, Calif., says he 
suspects that the original Diebold code 
wasn’t subjected to unit testing based 
on the lack of change-control docu- 
mentation. And because of this, “a lot 
of bugs end up getting through to the 
deployed systems,” he says. 

A January 2004 study by the Innova- 
tive Solutions Cell at Columbia, Md.- 
based RABA Technologies LLC tested 
Diebold systems that were to be de- 
ployed for Maryland’s March 2004 
primaries. The study found the general 
lack of security awareness in the Die- 
bold code “a valid and troubling reve- 
lation.” In addition, the report con- 


firmed Rubin’s assertion that there was 


little evidence that widely accepted 
standards of software development 
had been followed. 


MYSTERY TESTS 


One of the most critical aspects of the 
voting system development process is 
the testing and certification of hard- 
ware and software to ensure that they 
meet voluntary federal voting stan- 
dards for security and reliability. Three 
vendors act as so-called independent 
testing authorities (ITA). However, IT 
experts are highly critical of the test- 
ing process because of its secrecy. 

“Election officials are buying a soft- 
ware package, and there’s not a lot of 
transparency,” says Rudisin. “With vot- 
ing software, you pretty much buy a 
pig in a poke.” 

Ciber Inc. in Greenwood Village, 
Colo., and SysTest Labs LLC in Denver 
act as the two software ITAs. Wyle 
Laboratories Inc. in El Segundo, Calif., 
is the hardware ITA. All of them refuse 
to provide details on how they test the 
voting equipment or on their findings. 

“The ITAs that test these machines 
are hired by the vendors, so they are 
not independent and not neutral,” says 
Rubin, who hasn’t been allowed by 
Diebold to re-evaluate the source code 
since his initial study. 

Diebold spokesman David Bear says 
the company stands behind the testing 
and source code reviews conducted by 
“independent, unbiased third parties.” 
The reviews are done at the federal 
level using standards recommended by 
the Federal Election Commission and 
at the state level, he says. 

Bear also says voting systems are 
only a small part of the election proc- 
ess, which has many built-in security 
precautions and redundancies. “The 
voting machines are completely stand- 





With voting 

software, you 
pretty much buy a 
pig in a poke. 
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| JERRY RUDISIN, CEO, AGITAR SOFTWARE INC 


alone,” he says. “No network connec- 
tion of any kind — wired or wireless — 
is used during the voting process. The 
only connection to the machine at the 


polling place is the AC power cord.” 


Eric Lazarus, president of New York- 


| based DecisionSmith, says the testing 


model for e-voting systems “is broken.” 
Lazarus, lead author of a report by 
the Brennan Center for Justice and the 
Leadership Conference on Civil Rights 
on improving DRE reliability, says 2% 
of systems should be put through ex- 


| haustive testing that simulates Election 
| Day activity. The testing process most 


states use is based simply on how indi- 


| vidual machines count a few test votes. 


Election officials for Maryland, Vir- 
ginia and California, which have invest- 
ed millions of dollars in Diebold DRE 
systems, say they’re confident that the 
voting process can be made secure and 
reliable even if technical vulnerabili- 
ties exist hidden in the software. 

“We will not overreact to scare- 
tactic headlines that do not reflect the 
long-established security protections 
required by law, policy and procedure,” 
says Jean Jensen, secretary of the Vir- 
ginia State Board of Elections (SBE), 
which hired Arlington, Va.-based CACI 
International Inc. to conduct an inde- 
pendent security assessment of the 
Diebold systems. She also points out 
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that few of the e-voting critics “have 
presented any credentials regarding 
their expertise in election law or the 
policies and procedures.” 

All 46 localities in Virginia where 
DREs from six vendors will be used 
are developing security policies and 
procedures based on the CACI recom- 
mendations, and those procedures will 
be audited during the election, says 
Barbara Cockrell, spokeswoman for 
the IT manager at the Virginia SBE. 

A DRE must be tested in an actual 
election before it can be sold in Vir- 
ginia, says Cockrell, who adds that log- 
ic and accuracy tests are a key part of 
the certification process and that no 
system touches the public Internet. 

Linda Lamone, administrator of the 
Maryland SBE, criticizes RABA’s study 
of DRE use in Maryland, saying the re- 
searchers didn’t “conduct the exercise 
in a polling-place environment under 
the purview of trained election work- 
ers ... and bipartisan election judges 
observing voters’ activities.” 

But Michael Wertheimer, the prima- 
ry author of the RABA report, says he’s 
convinced that the state’s election is a 
disaster waiting to happen. “Despite 
our recommendations, Maryland has 
decided that each county will get only 
one password to protect their pre- 


| cincts. That means only three pass- 
| words protect these counties,” he says. 


“If any one of these passwords is com- 
promised and exploited, Maryland is 
up for grabs. All it takes is one election 
official to allow someone five minutes’ 
access to the server to completely rig 
the election.” 

Not quite, says Lamone. First, she 
says, no servers are located at polling 
places. Second, “neither the staff at the 
local boards of elections nor the elec- 
tion judges know the cryptographic 
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keys to the units or the server adminis- 
trative passwords,” she says. “The al- 
phanumeric keys are created at my of- 
fice and are only known to people on 
my staff who need to know.” Lamone 
adds that creating keys unique to each 
precinct would present “a logistical 
nightmare” and could endanger the se- 
curity and efficiency of the election. 

Wertheimer remains skeptical about 
the state’s preparations to use DREs. 
“Maryland refuses to put a firewall on 
servers that are connected via dial-up 
modems,” he says. “They refuse to up- 
grade the Windows 2000 operating 
system with the latest security patches 
— they were 16 patches behind in Janu- 
ary of this year.” 

Lamone says security experts hired 
by the state determined that since no 
component of the voting system is 
connected to the Internet, the firewall 
and patches recommended by RABA 
aren’t necessary. Moreover, she adds, 
“a person would have to have knowl- 
edge of the encrypted security con- 
trols in place for sending the unofficial 
results by modem, as well as user iden- 
tification requirements and passwords, 
to gain access to the server.” 


STILL TIME? 


Lazarus and Gossels say there is still 
time for states to implement proce- 
dures that can lessen the likelihood of 
malfunctions and malicious activity 
and have jointly devised a scorecard 
that election administrators can use to 
rate the security and reliability of DRE 
systems (see box). “The best that we 
can do in terms of security at this 
point is still not very good,” Lazarus 
says. “But there’s no excuse for not 
doing some of the easy things.” 

The bottom line, say Gossels, 
Lazarus and Wertheimer, is that there 
will be problems with DREs next 
month, ranging from malfunctions that 
cause polling places to close to poten- 
tially more nefarious incidents of tam- 
pering that nobody is able to detect. 

“I am worried that election officials 
fail to recognize that elections run by 
computers require a completely differ- 
ent model than those run by paper,” 
says Wertheimer. “It will take a cata- 
strophic voting 9/1] to force change.” 


@ 49840 


MORE ABOUT E-VOTING 


Q&A: Frank Wiebe, president of DRE vendor AccuPoll, 
talks about developing and testing e-voting systems: 


QuickLink 49839 
Raising questions: More than one research study has 
found flaws in e-voting software code and testing: 


QuickLink 49849 
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IBM Rolls Out Xeon 
Chips in Servers 


IBM last week announced five 
new blade servers with the Xeon 
chip that’s capable of 32- and 
64-bit x86 processing. The sys- | 
tems can support two SCSI drives | 
internally. A chassis will fit 14 
SCS!-based blades. The systems, | 
with processor speeds from 2.8 
to 3.6 GHz, will be available Nov. 
12, starting at $2,039. IBM also 
detailed an eServer blade server 
with a 2.2-GHz Power processor 
that will be available Oct. 29, 
starting at $2,699. 





Alcatel Announces 
New Switches 


Alcatel announced the Alcatel 
OmniSwitch 6602 Layer 3 work- 
group switch, starting at $2,140; 
the Alcatel OmniSwitch 6600 
U24 fiber-to-desktop switch, 
starting at $3,495; and power- 
over-Ethernet capability for its 
OmniSwitch 6600 family, starting | 
at $3,195. They're available now. 


SGI Launches 
Linux Workstations 


Silicon Graphics Inc. has an- 
nounced its new Silicon Graphics 
Prism line of Linux-based com- 
puters for users who require ad- 
vanced graphics capabilities. The 
machines use Intel Itanium 2 
processors, open standards, ATI 
graphics accelerator cards and a 
shared-memory architecture, said | 
SGI. Pricing starts at $30,000. 











CA Makes Update — 
To Database App 


Computer Associates Internation- 
al Inc. last week said it was ship- 
ping Release 11 of its Unicenter 
Database Management applica- 
tion for IBM’s DB2 database run- 
ning on the z/OS operating sys- 
tem. The new iteration will sup- 
port Version 8 of IBM's DB2 for 
z/OS, and its enhancements in- 
clude improved reliability and 
faster response times, according 
to CA. Pricing wasn’t disclosed. 





ROBERT L. MITCHELL 


The Internet Holds 
No Secrets 


NE OF MY FIRST JOBS out of school in 
the early 80s was working technical sup- 
port for a PC clone vendor. It was there 
that I learned firsthand how the benefits 
of information technology don’t always 


trickle down to workers — 
or the customer. 

My work life was run by 
a PC that divvied up tech- 
nical support calls and 
monitored the average call 
time and the quantity of 
calls I completed. Each 
morning started with a re- 
view of our call statistics 
and the day’s call quota. 

The promise: Those who 

met the day’s per-worker 

goal could leave the phones 

and work on software quality assur- 
ance testing for the rest of the day. QA 
was a much more relaxing and desir- 
able assignment. If a worker reached 
the goal, the monitoring PC would 
beep loudly, and the person whose 
name appeared on the display would 
be done — an event that became 
known as “beeping off.” 

In my six months there, I never 
beeped off before 5:30. Eventually, I 
came to realize that management al- 
ready had a full-time QA department 
but was always short on technical 
support staff. So it became very good 
at using the PC-based statistical analy- 
sis tools to keep that carrot just out 
of reach. 

The worst part, though, was what 
the vendor did to its customers. While 
reviews lauded the quality of its ma- 
chines, in fact the system BIOS and 
graphics subsystems had fatal compat- 
ibility problems with many applica- 
tions. Popular business programs that 
reviewers tested, like Lotus 1-2-3, 
worked. But many others did not. 

Fixing those problems meant re- 
turning the PCs under warranty — an 





expense that management 
wanted to avoid. So we 
were ordered not to ac- 
knowledge them. When 
customers called in, we 
dutifully walked them 
through all possible solu- 
tions, told them their pro- 
gram should work fine, 
documented their com- 
plaint and promised to let 
them know if a fix became 
available. This is why my 
. career in technical support 
was a short one, but to this day, I’m 
amazed that those problems stayed un- 
der the radar despite the fact that we 
continued to ship defective machines. 
What a difference 20 years makes. 
Today, Internet chat rooms, news- 
groups, e-mail lists and Web sites 
would be buzzing about that compa- 
ny’s breach of trust with its employees 
and customers. Online communities 
would have quickly identified the 
company as an undesirable place to 


| work and dubbed its machines lemons. 


Information now travels so fast that 
companies are often left scrambling to 


| contain the damage when bad news 


hits. Kryptonite, the maker of bicycle 
locks, was the latest company to face 
that challenge after word spread on 


| the Internet last month that many of 


its locks could be picked using a ball- 
point pen. The Bic revelation, quickly 
picked up by the news media, dealt a 
blow to the company’s brand and 
forced a recall. 

Kryptonite may not have known 
about the flaw, but it was clearly pe- 
nalized for failing to find and correct 
the problem before the public did. 





The Internet is ruthlessly efficient 
at disseminating information. To avoid 
such disasters, businesses need to rig- 
orously, iteratively and methodically 
test their products for all possible prob- 
lems and have policies to ethically and 
directly respond to issues in real time. 

But the destructive power of the In- 
ternet hits more than business. In the 
case of Kryptonite, its customers may 
have suffered collateral damage. The 
rapid release online of detailed in- 
structions on how to defeat the lock — 
including a video — let the world 
know how to steal any bicycle secured 
with this popular product. 

Is it right that such information 
should be immediately and widely dis- 
seminated, no matter how destructive 
or who might get hurt? Microsoft 
would say no. It recently criticized a 
company that publicly claimed to have 
identified a vulnerability in Word 
2000 without first giving Microsoft a 
chance to verify the problem and de- 
velop a patch to protect its customers. 

Microsoft’s thinking doesn’t fly with 
Daniel Weitzner, a Kryptonite lock 
user and occasional Computerworld 
columnist whose bicycle was stolen 
prior to the disclosure. Had he known 
about the flaw earlier, he might still 
have his bicycle, Weitzner says. 

It’s true enough that such disclo- 
sures can hurt customers who don’t 
get the news before the bad guys do. 
But immediate disclosure also empow- 
ers users to protect themselves. 

Whether doing so is right or wrong 
is irrelevant in the end, since the Inter- 
net doesn’t make such distinctions, 
and we can’t put the technology genie 
back in the bottle. Rather than com- 
plain about the situation, both cus- 
tomers and vendors are just going to 
have to adapt. @ 49999 
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NLIKE THE WILD HIRING OF THE 90s, 
the slow rebuilding of bare-bones IT 
shops over the next few years will 
provide an opportunity to staff up 
thoughtfully. It’s another chance to 
get diversity right. 

Lots of IT organizations talk about 
diversity, but some are better at 
achieving it than others. We spoke 

with representatives of five IT groups that have been 
repeatedly cited as diversity leaders by the Black Data 
Processing Association to discover how companies 
can find, recruit and retain top minority talent in IT. 


They all agreed on two things: Achieving diversity 
isn’t quick or easy, and it requires an ongoing, com- 


=| prehensive commitment. “Diversity is not a one-time 
=| event; it is a way of doing business, a part of our cul- 
| ture,” says George Hall, senior vice president of in- 


formation resources human resources at Bethesda, 
Md.-based Marriott International Inc. 
“Diversity is a business strategy,” says Andy Baker, 


| senior manager of human resources recruitment and 
| selection at The Allstate Corp. in Northbrook, IIl. 


“Our company focuses on diversity across the board, 
in our succession management, recruitment and 


| leadership development.” 


With that overall approach as the context, here are 


| some of the innovative tactics diversity leaders use: 


DEDICATED STAFF 
| Nothing says commitment like having human re- 
| sources staff dedicated to achieving diversity in your 
| workforce. At Bank of America Corp. in Charlotte, 
| N.C., Melissa Thompson is vice president of staffing 
| diversity. “I was hired by BOA in October of last year 
| to focus on diversity staffing,” she says. “It’s a new 


role. My job is to focus on finding and hiring top di- 


| versity talent across the technology space.” 


| PIPELINE RECRUITING 


It’s hard to be concerned with diversity if you're 
scrambling to fill holes in your organization. Know- 


ing that, committed companies have learned to look 


ahead. “We try to anticipate resource needs and re- 
cruit skills in a proactive way rather than with such 


| urgency that we can’t pay attention to the demo- 


graphic mix of our population,” says Greg Tahvonen, 
vice president for human resources at Delta Technol- 
ogy Inc. in Atlanta. Looking ahead gives the Delta Air 
Lines Inc. subsidiary the luxury of grooming a pipe- 
line of talented minority people. “We look to our fu- 


The ExtraMile 


lf you're ready to really commit to diversity in your IT shop, 
here's how to achieve it. 





MANAGEMENT 


www.computerworld.com 


32 COMPUTERWORLD October 18, 2604 


Inc., the National Society of Black Engineers and the 
Black Data Processing Association, says Michele T. 
Ralph, director of information services human re- 
sources in Merck’s Rahway, N,J., office. “We attend 
conferences and do a lot of recruiting there,” she 
says. She also maintains relationships with historical- 
ly black colleges and universities and uses Web sites 
that cater to minorities for recruiting. 

Successful companies also tailor their messages to 
| their markets. “We try to coordinate our approach 
with the target audience,” says Baker. That includes 
using specialized ads and collateral materials that are 
culturally relevant to the segments to which he is ap- 
pealing, he explains. 


ture skill needs, and we look at developmental pro- 
grams such as student intern programs to be sure we 
have the right mix of folks in the queue to select 
from,” he explains. Delta also makes sure it’s training 
interns for the jobs it will need to fill when they’re 
ready to enter the workforce. 


Tips from the 


BOPA 


Milt Haynes, immediate 
past president of the 
Black Data Processing 
Association, offers three 
tips for recruiting and 
retaining black IT talent: 


RELATIONSHIP RECRUITING 

Commitment to diversity doesn’t stop when hiring 
slows down. “When the supply side outstrips the de- 
mand side, it’s extremely important to continue to 
maintain relationships” with talented minority work- 
ers, says Hall. To do that, Marriott relies on “relation- 
ship recruiting” he explains. “When we don’t have 
the demands, our associates, including our manage- 
ment team, maintain relationships with those people 
we would otherwise want to attract.” 

Relationship recruiting addresses the passive job 
seekers Hall is trying to connect with. “We're going af- 
ter the top 5% of the market, and many of those aren’t 
actively seeking opportunities, so the normal chan- 
nels don’t reach them,” he says. 
But relationship recruiting does. 

For example, for the past two 
years, Hall has maintained a rela- 
tionship with “a very senior indi- 
vidual whom we would love to 
have” but for whom no suitable 
opportunity has been available. 
Hall phones the person, ex- 
changes e-mails, meets for coffee, 
reports on how things are going 
— stays in touch. “So if an oppor- 
tunity does open up, we don’t 
have to re-establish the relation- 
ship,” he says. “It continues to 
keep our name out in front of 
people’s minds.” 


EXPLORATORY INTERVIEWS 
Thompson uses what she calls 
exploratory interviews to recruit 
top minority talent, even during a 


EMPLOYEE REFERRAL 

Probably the strongest single means of recruiting mi- 
norities to IT is through other minorities. “Every top 
talent diversity candidate you hire will bring you ad- 
ditional top talents,” says Thompson. 

Hall agrees. “We have found that talented individ- 
uals tend to associate with other 
talented individuals,” he says. 
“Using associate referrals is a 
very impactful way to identify 
candidates. We use it to the 
greatest extent possible.” 

Marriott has a formal referral 
program with cash awards. “So 
there is responsibility all across 
the business to recruit,” Hall says. 

At Allstate, the employee- | 
referral program is used so wide- 
ly that it’s been responsible for 
the recruiting of about 40% of 
new hires, says Baker. Allstate 
also has a strong community 
presence. “I get phone calls all 
the time from employees who 
say, ‘My church is hosting an 
event. Come and set up a booth 
about openings at Allstate,’ ” 
Baker says. 


The best way is to demonstrate 
a commitment to diversity in the 
senior management ranks. This in- 
cludes providing employees with role 
models who are visible and actively involved 
in community outreach programs and diver- 
sity volunteer initiatives. 
Recruit through historically black 
colleges and universities, and asso- 
ciations like the BDPA. These are 
the best places to find highly qualified 
African-American candidates. 
Provide competitive salaries, 
attractive fringe benefits and open 
access to promotional opportuni- 
ties. Companies that retain the best- 
qualified talent over time understand that it’s 
very important to do this. 





Diversity Recruiting 


means what it says. “Diversity candidates — and I 
was one — love knowing you have that accountability 
| all through the organization right to the top,” she says. 


hiring slowdown. “We talk to 
candidates, even though there is 
no position open,” she explains. 
The exploratory cycle begins 
with a quarterly résumé round- 
table, where managers go over 


COMMUNITY SERVICE 

Through community service, 
companies can do good while at- 
tracting potential hires. At Mar- 





riott, for example, employees de- 


The same is true at Delta Technology, where man- 
agers are measured on their ability to create and 
maintain a diverse workforce, says Tahvonen. “Our 
performance standards allow an objective review of 
performance,” he says. 

Progress is carefully measured at Marriott, says 


| Hall. For example, over the past five years, his IT di- 
| vision has increased its total minority representation 
by more than 5%, although the size of the division 
| overall has decreased by 14%. “So at a time when our 
| head count has gone down, our minority representa- 
| tion is going up,” he says. During that period, Mar- 
| riott increased the number of black senior-level tech 
| associates by more than 100% and promoted seven to 
director-level positions, he says. 
Companies say that once they begin to see prog- 
| ress in diversity, others notice, and then it snowballs. 
“External recognition helps,” says Baker. “When 
| we’re named a top company for diversity, people see 
that.” Hall agrees. “Marriott has been recognized by 
| organizations like BDPA, and that helps us reach po- 
tential candidates. Generally, the number of e-mails 
| 


| vote one workday each year to causes such as Habi- 
tat for Humanity International Inc., Children’s Mira- 
| cle Network or local events in the surrounding com- 
munities. “I’ve done everything from digging fence 

posts to helping to refurbish a local amusement 
park,” Hall says. He notices that interest from minor- 
ity candidates usually increases markedly after these 
activities. 


ACCOUNTABILITY 

Backing up diversity talk with real accountability 

| makes a difference. At Bank of America, diversity 

| targets are an integral part of each manager’s perfor- 
| mance and compensation plan, Thompson says. “We 
| have accountability from the CEO straight down.” 
That accountability not only affects the decisions 
| people make on the job, she says, but it also sends a 
message to minority candidates that the company 


the résumés of candidates Thompson hopes to re- 
cruit, even though no specific positions may be open. 
They tell her which applicants look most promising, 
and she calls them in and explains the situation. “I do 
some coaching so they understand that there is no 
opening, but if they sell themselves, anything could 
happen,” she says. 

It frequently does. “The managers often say, ‘Well I 
was going to hire in Q3, but since you're sitting here, 
I'll hire you now, ” Thompson says. “We’ve found it 
gets managers thinking outside the box. The more 
exploratory interviews we've done, the more suc- 
cesses we’ve seen.” 


TARGETED RECRUITING 

Companies committed to diversity get to know mi- 
nority advocacy groups. Merck and Co. participates 
in the Society of Hispanic Professional Engineers 


and phone calls from interested candidates will in- 
crease because they read the articles.” @ 49738 
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National Medical 
Taps Masters, Hall 


National Medical Health Card 
Systems Inc. in Port Washington, 
N.Y., said it has named health 
care industry veteran BILL MAS- 
TERS CIO. Masters will oversee 
the company’s IT infrastructure 
and advance its use of IT to 
streamline acquisition integration. 
Prior to joining NMHC, Masters 
was vice president of health care 
business solutions at CVS Corp. 
He has also held senior IT posi- 
tions at Reliable Drug Stores Inc., 
Rite Aid Corp. and Begley Co. The 
company also appointed AGNES 
HALL president of integrail, 
NMHC’s informatics company, 
which delivers health care bene- 
fit/risk management software. 


N.Y. Times Names 
Thurm Its ClO 


The New York Times Co. an- 
nounced that DAVID A. THURM, 
vice president for real estate de- 
velopment, has been named CiO 
of the company and The New 
York Times newspaper. He will 
report to Leonard P. Forman, ex- 
ecutive vice president and chief 
financial officer, and to Scott 
Heekin-Canedy, president and 
general manager for The New 
York Times. Thurm will continue 
to be responsible for overseeing 
the construction and develop- 
ment of the company’s new 
headquarters in Manhattan and 


for other building projects. Previ- 


ously, he served as chief operat- 
ing officer for New York Times 
Digital. 


Christopherson CTO | 


At Health Language 


Health Language Inc., a supplier 
of medical technology in Aurora, 
Colo., announced that JOHN 
CHRISTOPHERSON has been 
hired as chief technology officer. 
Prior to joining HLI!, Christopher- 
son was vice president of applica- 
tion architecture at McKesson 
Provider Technologies. He has also 
served as vice president of corpo- 
rate systems at UnitedHealthcare. 





BARBARA GOMOLSKI 


What to Tell 
‘The Kids 


GROUP OF COLLEAGUES and I were 
talking during a conference call the other 
day about the IT job market. Many of us 
have kids who are starting to think about 
colleges and professions. Someone asked 
the group, “Would you advise your kid to go into IT to- 
day?” The majority of people on the call said no. This is 
just anecdotal evidence of what is blatantly obvious to 


most of us: The job market 
for IT professionals isn’t 
what it used to be. 

Let me be clear. The 
tenor of that recent call 
with my colleagues was not 
totally negative toward IT 
careers. Many of the peo- 
ple on the call said they 
wouldn’t discourage their 
kids’ interest in IT. These 
parents would strongly 
caution their children 
about their course of study, 
however. They would ad- 
vise their kids to be very : 
clear about what they wanted to do in 
IT rather than just assume that their 
computer science degrees would open 
all doors. 

To be sure, there are fewer IT posi- 
tions available today than there were 
just five years ago if we consider tradi- 
tional IT roles, such as infrastructure 
management, support and program- 
ming. What’s more, the jobs that are 
available in IT increasingly require 
skills that aren’t taught as part of the 
computer science curriculum. This 
is in stark contrast to when I graduat- 
ed from college. All the computer 
science majors I knew had secured 
high-paying jobs at Fortune 100 firms 
prior to graduation. 

But the changes in the IT job market 
affect all IT professionals, not just 


| careers. All professionals — not just 





those new to the field. So, 
what are the chief differ- 
ences today? Here’s how I 
see it: 

@ The days of studying 
computer science, getting 
an entry-level job as a pro- 
grammer and moving up 
the IT ladder are gone. 
First of all, there are fewer 
programming jobs avail- 
able now, because of off- 
shore outsourcing. 

Second, we can no 
longer assume that a gener- 

; E al computer science degree 
is going to prepare graduates for the IT 
job market. Certainly, some firms are 
still hiring new talent through the pro- 
gramming ranks, but this process is 
not nearly as common as it used to be. 

@ As a result of automation and the 
spread of consumer IT, we don’t need 
as many people as we once did to 
manage IT systems. Technology is 
more standardized, and end users are 
more familiar with technology. 

@ The increasing pace of business, 
industry consolidation and globaliza- 
tion means that most of us will move 
from company to company during our 


those in IT — will gather the skills 

they need from multiple employers. 
The IT job market is not all bad 

news, though. There are opportunities | 





in certain areas, and even growth. 


| Here are some of them: 


Business process design and management. 
Business process design — something 
IT has always been expert at — is 
starting to surface as a new competen- 
cy for IT professionals. Their prowess 
at process design comes from getting 
to see entire business processes as 
they build IT systems. Enterprising IT 
professionals are capitalizing on this 
by driving process improvement in 
their own organizations and making 
process design and management a key 
part of their jobs. 

Information management. Companies are 
generating more and more data about 
their customers, partners and com- 
petitors. Organizations are going to 
need individuals who can help turn 
this data into usable information. This 
includes experts in customer relation- 
ship management, business intelli- 
gence and search technologies. 

Relationship and vendor management. As 
the multisourced IT environment has 
gained ground, it has become clear 
that IT organizations need people who 
can negotiate and manage contracts 
and who can help select and manage 
IT service provider partners. 

Finally, traditional IT jobs (such as 
programming and infrastructure man- 
agement) are not going away. Though 
there may be fewer of them, we'll still 
need people in these positions for the 
foreseeable future. 

The IT job market is changing, and 
it can appear bleak. But I’m actually 
pretty optimistic about the prospects 
for IT-savvy professionals. However, 
future IT job seekers will need to do 
more than study computer science at a 
reputable college to succeed. @ 49732 
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Thrifty Storage Strategies 
To maximize storage savings, 
Glenn Exline and other IT pros 
are homing in on long-term 
planning initiatives. PAGE 36 
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Secondhand 

Savings 

Buying used storage equipment is 
cheaper than buying new. But there 


are risks involved. PAGE 40 





Long Live Tape 

Columnist Mark Hall was planning to write 
about the impending demise of tape. But 
then he looked a bit closer and discovered 


that it has a bright future. PAGE 46 





Your Storage 


Cost-effective strategies 
to help you cope wit 
soaring demands. 


Dolla 


EDITOR’S NOTE 


ET’S TAKE IT BY THE NUMBERS: When Sage 
Research asked 104 executives which tech- 
nology areas are the greatest sources of pain 
in their organizations, they ranked security 
No. 1 (no surprise there) and storage No. 2. 
Why is storage so painful? Maybe it’s because stor- 
age demand is doubling every year and IT 


and insufficient staffing. This special report tackles 
the issue in the middle — cost — by identifying 
thrifty strategies for the storage manager, from 
big-picture, long-term plans that reduce the total 
cost of ownership to short-term ideas like buying 
secondhand gear. 

Our survey also found that the top- 


budgets certainly aren’t. An IDC study says BRU Rha of-mind storage topics for the next few 
the demand is fueled by growth in e-mail, wa aaM ella months are disaster recovery and storage 


data warehousing and CRM, not to mention 
regulatory requirements. The effort to mare 
archive boatloads of e-mail (with those giant Hig 


security, which means we’ve 
come full circle: Security 
and storage are the top tech- 


attachments) is especially costly: The Yan- OTT nology issues in the IT field 


kee Group says a typical corporation with WAY 
5,000 employees will accumulate nearly 4TB 
of e-mail every year, thus requiring the services of at 
least one full-time storage administrator! 

This helps to explain why, in an exclusive survey 
of 91 IT executives, Computerworld found that the 
top three storage headaches are data growth, cost 


Pra eam) Lt) 


today, no question about it. 
@ 49814 

Mitch Betts is Computer- 

world’s executive editor. 

Contact him at mitch_betts 
@computerworld. com. 
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Long-term 
planning is 
the ticket to 
big savings. 
By Drew Robb 


“By understanding your requirements, you can balance performance, cost and future growth. That way, you avoid buying an ICBM 


when all you needed was a fly swatter,” says , manager of advanced technology at Patrick Air Force Base. 


HERE ARE DOZENS of ways 

you can shave a little here 

and a little there when it 

comes to overall storage 

costs. But at the end of the 

day, storage is still going to 
be a whopping part of you budget. 
That’s why companies that are serious 
about real savings take a long-term 
strategic view and push their plans 
through to completion. 

Take the case of Cisco Systems Inc. 
Utilization of just 20% to 30% on a di- 
rect-attached storage architecture was 
costing a fortune. “With no accurate 
method for tracking consumption and 
no way to plan for growth, our storage 
spending grew out of hand between 
2000 and 2002,” says Bill Williams, 





storage 


manager of enterprise storage opera- 
tions. “That’s why we decided to focus 
on achieving a consolidated storage 
model to raise utilization levels and 
lower TCO.” 

In a relatively short time, the compa- 


| ny has taken major strides toward 


achieving that goal. In 2001, Cisco’s 
750TB of data was almost all direct- 
attached storage, with a few storage- 
area network islands interspersed. 
Today, Cisco has 2.1 petabytes of man- 
aged data, but only 20% of that is di- 
rect-attached storage; 55% is on a Fibre 
Channel SAN, and 25% is network- 
attached storage. This shift involved 
migrating nearly 1 petabyte of data to 
Cisco’s MDS 9500 Series Multilayer 
Directors and consolidating 80 smaller 
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EMC Corp. frames to eight large ones. 
Cisco’s experience is far from un- 
common. Escalating storage costs 
are pushing most companies to look 
for cost-saving and -avoidance strate- 
gies. While some save cents here and 
there on quick fixes, the real savings 
come through long-term planning. 
Large organizations, in particular, are 
finding that the sheer volume of data 
that exists in disparate systems neces- 
sitates the rearchitecting of the storage 
infrastructure. 


Taking the Long View 

By consolidating storage and migrating 
to networked storage, Cisco has taken 
annual total cost of ownership from 40 
cents per megabyte to 10 cents per 
megabyte, says Williams. And there 
may still be room for improvement. 
Cisco has a target of 8 cents per 
megabyte this year. 

Other organizations are taking a 
similarly long-range view to slash their 
storage budgets. The 45th Space Wing 
of the U.S. Air Force, for example, ex- 
perienced problems with its direct- 
attached storage architecture. Backups 
were slow, systems took too long to re- 
cover, and performance suffered badly. 

The 45th Space Wing has spent the 
past several years implementing a cen- 
tralized storage environment consist- 
ing of BrightStor Enterprise Backup 
software from Computer Associates 
International Inc. and storage hard- 
ware from Brocade Communications 
Systems Inc., EMC and Exabyte Corp. 
By pooling storage in large reposito- 
ries, capacity increased by 600% to 
6.5TB, file and print servers were 
reduced by 33%, and backup times 
decreased by 83%. 

“From 12 hours per night for backup, 
we are down to four hours,” says Glenn 
Exline, manager of advanced technolo- 
gy at Patrick Air Force Base. The eco- 
nomic payoff has been impressive. 
The costs to date have totaled about 
$1.4 million, he says, while the savings 
are about $2 million. 

To prevent storage costs from mush- 
rooming, Exline stresses understand- 
ing the specific SAN design. Almost all 
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Introduction 


down security during a merger. U.S.- 
based multinational companies plan 
to increase their merger and acquisi- 
tion activity over the next two years, 
with 70% expecting to be involved in 
such deals in that period, according to 
a recent PricewaterhouseCoopers 


The Grand Challenges | 


RECENT SURVEY OF 104 EXECUTIVES fingered IT securi- | 
ty as the No.1 technology pain point in corporations. | 


Why? For one thing, the threats come in many forms | 


and from many directions: disgruntled employees, 
fired employees, clueless employees who succumb to social en- 
gineering, passwords left on Post-it notes, wide-open instant 
messaging and increasingly powerful hacker tools in the hands 


of teenagers. 

“Companies must understand that 
the corporate perimeter dissolved 
with the very first Internet connec- 
tion,” says Lynne Ellyn, lead author of 
a security report from Cutter Consor- 
tium in Arlington, Mass. “Every busi- 
ness-to-business supply chain con- 
nection, every Internet storefront, 
every reverse auction that a company 
puts into operation opens the corpo- 
ration’s virtual doors. Once connect- 
ed to the World Wide Web or the In- 
ternet, a company actively occupies a 
virtual space that is peopled with com- 
petitors, terrorists, children, environ- 
mentalists, lawyers — every segment 
of society — or, actually, every seg- 
ment of nearly every society on earth.” 

New security and privacy laws are 


being passed, and the risk of cyberter- 


rorism looms. Plus there are seeming- 
ly mundane issues: The telecommuter 
working at his kitchen table from a 
home PC — connected to your corpo- 
rate network — could be the weakest 
link in your security defenses. “We 
got hit with the Blaster worm when a 
home user tapped into a machine he 
didn’t really require access to,” says 
Rich Dase, technology director at 
Knowles Electronics LLC in Itasca, Ill. 
It’s no wonder that some compa- 
nies throw up their hands and let con- 
tractors that have security expertise 
— known as managed security serv- 
ice providers — handle the work. The 
threats are “outpacing the enterprise’s 
ability to keep up with the latest 
countermeasures and techniques to 
thwart attacks,” according to a recent 





report by The Yankee Group. The re- 
searchers predict that enterprises will 
outsource 90% of their security activ- 
ities by 2010. 

But the outsourcing approach is no 
panacea — it has it’s own challenges. 
And many corporations don’t want to 
turn the keys to the castle over to an 
outside firm. “You cannot outsource 
risk. You should never outsource 
everything,” says Yankee Group ana- 
lyst Eric Ogren. 


Insider Threats 

One of the biggest security threats 
comes from inside the organization. 
According to the American Society 
for Industrial Security, current and 
former employees and on-site con- 
tractors with authorized access to fa- 
cilities and networks continue to pose 
the most significant risk to intellectu- 


al property such as research data, cus- | 


tomer files and financial information. 
It’s especially important to lock 


Pain Points 
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Barometer Survey of 170 executives. 
That will mean a lot more work for 
chief security officers — before the 
deal is signed and afterward, when se- 
curity technologies and policies have 
to be integrated. You'll need to ensure 
that data, networks and systems re- 
main as secure as possible during the 
often turbulent times that accompany 
a merger or acquisition. 

For example, you'll need to analyze 
the security policies and technologies 
at the other company and determine 
how vulnerable it is — well before the 
actual merger. “Spend a lot of time 
learning about the company and its 
culture, where it does business, 
whether security [management] is 
centralized or decentralized, and how 
the company values security,” says 
Bobby Gillham, manager of global 
security at ConocoPhillips in Hous- 
ton, who headed security for Conoco 
during its 2002 merger with Phillips 
Petroleum. 

And you'll need to anticipate social 
engineering and other security threats 
from disgruntled employees at both 
of the companies involved. As soon 
as an employee has been notified 
about a layoff, cut off access to all 
critical services and applications. 
“You need to pay particular attention 
to protecting against people walking 
out with proprietary information,” 
Gillham says. 


Hole in the Firewall 
Meanwhile, knowledge workers are 
using consumer-oriented instant 
messaging applications, opening up 
your network to more possible mis- 
chief. Gartner Inc. has identified IM 
as one of the top ll security issues for 
the corporation. “IM, by its very na- 
ture, punches a hole in the firewall, 
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Advice from Your Peers 


A sampling of the practical tips 
you'll find in this report: 


ENFORCE a “lowest privilege level” pol- 
icy for information assets, which means 
employees get access only to the data 
they need to do their jobs. No one needs 
access to everything. 


CHANGE systems administrator pass- 
words when key IT staff members leave 
the company. 


SET a time limit - like 15 minutes - for 
responses from security services firms. 


and that opens up the possibility of 
inviting in a dangerous worm,” says 
Internet security expert Douglas 
Schweitzer. 

Battling this onslaught of security 
problems will require not only savvy 
but also money. “Back in the good old 
days, security consisted of a few fire- 


ANTICIPATE social engineering and 
other security threats from disgruntled 
employees at both of the companies 
involved in a merger. 


BLOCK file transfers for users of con- 
sumer instant messaging. 


HIRE trained investigators for computer 
crime cases. Even great in-house sys- 

tems administrators can unwittingly foul 
up the evidence needed for prosecution. 


MINGLE with the opposition at the an- 
nual Def Con hacker conference in Las 
Vegas to find out what they're up to now. 


says veteran CIO Doug Lewis. “The 
threats have outgrown those simple 
defenses, and the cost has outgrown 
the approval level of the chief securi- 
ty officer and, sometimes, that of the 
CIO.” That means Fortune 500 com- 


| panies are finding themselves with 
| security expenditures that require 


walls and some virus protection,” CEO and even board-level approvals. 


Risk - it’s everywhere. And no one knows that better 
than IT security professionals. Disgruntled employees, 
fired employees, clueless employees who succumb to 
social engineering, passwords left on Post-it notes, 
wide-open instant messaging and increasingly powerful 
hacker tools in the hands of teenagers - this bulletin 

will help you address those risks with sage advice for 
protecting corporate assets in a dangerous world. 


FREE DOWNLOAD: “Our Hottest Security Tips” 
For a limited time, get this full report (a $49.95 
value) for free, compliments of Cisco. 
www.computerworld.com/securitytipsbulletin 
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Introduction 


Boosting Your Budget 

In this report, Lewis provides a 
brilliant plan for developing a rock- 
solid business case for boosting 
your IT security budget — with a 
credible return on investment that 
even the chief financial officer 

will love. 

Overall, the report has dozens of 
practical tips to help you manage the 
IT risks faced by the modern corpo- 
ration. But before you implement any 
of them or buy another security prod- 
uct, do one thing: Stop to identify the 
three biggest security risks your com- 
pany faces — whatever would bring 
your company to its knees. They will 
vary, depending on your industry and 
business model. Is it theft of credit 
card numbers? Embezzlement? Priva- 
cy violations? 

Be sure to address those high-risk 
areas first, before looking at more ex- 
otic problems. Take care of the ba- 
sics: passwords, patches, employee 
training, antivirus software and ac- 
cess controls. And if you can’t keep 
up, consider outsourcing. 
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Boost Your Security 





2:07PM LOG IN TO HOT SPOT 2:08PM 
NETWORK SECURES THIN AIR 2:09PM 
TRANSMIT FILES THROUGH THIN AIR 
2:25PM UPDATE PURCHASE ORDER 
2:35PM EXPENSE COFFEE ORDER 


The more freedom you give employees to work anywhere, the more you can achieve. That's good. But, at the same time, the more you expose 
yourself to intruders and worms. That's not so good. How far can a network travel to protect your office? Now, the answer is everywhere. Cisco 
networks, with integrated wireless security, protect mobile workers who constantly move outside the safety of the corporate network. So 
nformation is secured. No matter where it exists. To learn more about how Cisco can help plan, design and implement your network security 
visit cisco.com/securitynow. SELF-DEFENDING NETWORKS PROTECT AGAINST HUMAN NATURE. 


Cisco SYSTEMS 


THIS IS THE POWER OF THE NETWORK. NOW. 
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iSCSI Brings 
Lower-Cost 
Storage Networks 


INTERNET SCSI, OR iSCSI, was de- 
signed to offer the advantages of 


oe ee ee ee ee ee ee ee ee ee ee ee ee ee ee ee ee ee 2 ee ee ee ee ee ee 


trategies 


simple file/print and Web 
applications to Linux, gain some expe- 
rience, and then gradually execute a 
small-scale Linux SAN. 


archiving systems to 
take inactive data off production sys- 
tems to eliminate as much as 60% of 
NT MeN mer LRU latte 
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networking with your peers. 


everyone in storage a little 
every month. That can bring down your 
support costs considerably. 
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Often, they are the equivalent of a car 
salesman talking you into an extra 


storage vendors have multiple tiers of 
products. “By understanding your re- 
quirements, you can balance perfor- 
mance, cost and future growth,” says 
Exline. “That way, you avoid buying 
an ICBM when all you needed was a 
fly swatter.” 

A case in point: The smaller EMC 
Clariion array proved a better fit than 
EMC’s high-end Symmetrix array. 
“There are lots of situations that call 
for larger systems, but they were 
overkill in our case,” says Exline. 


Surviving the Learning Curve 
Choosing a system is a decision that 
can be made only after you do your 
homework. In reality, however, that 
may not be possible until you have 
completed your first SAN. And by 
then, it may be too late. 

“Any enterprise must get a qualified 
VAR/integrator involved, as there is 
nothing like experience when it comes 
to SANs,” says Steve Duplessie, an 





$100 a month for a better CD player, an 
extra cup holder and a sunroof. Do you 
NAN RUS ea 
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to speed backups and reduce costs. But 
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with Windows. Get a networkable de- 
fragmenter such as Executive Soft- 
ware International Inc.’s Diskeeper. 
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neither too general nor too specific. 
Too specific and costs can mount. Too 
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business value. 


if you actually have the time, 
expertise and resources to-competent- 
ly evaluate vendors or implement stor- 
FMC cM Arne aki 
dustry experts. 
- Drew Robb 


analyst at Enterprise Strategy Group 
Inc. in Milford, Mass. “There can be a 
ton of gotchas if you aren’t prepared 
upfront.” 

Exline agrees. He’s seen IT depart- 


| ments attempt huge storage projects 


with impossible deadlines. There is a 


learning curve that has to be respected, 


he says, and he preaches training on 
new storage products. “By being self- 
sufficient to a large degree, we save a 
lot on support,” says Exline. 

Another way to reduce costs is 
through consolidation. Golden Gate 
University in San Francisco is nearing 
the end of a three-year migration of its 
storage environment from six operat- 
ing systems to Linux and Windows. 
The university is also consolidating 
servers, databases and enterprise re- 
source planning systems. 

“Leveraging Linux with an enter- 
prise storage tier has reduced server 
acquisition costs by over 20%,” says 
Keith Rajecki, Golden Gate Universi- 





ty’s IT infrastructure manager. “TCO 
in our old storage environment was 10 
times greater than it is today.” 

He reports that maintenance would 
have cost 250% more on a Sun Solaris 
environment than it does on a Dell/ 
Linux combination. IT operating costs 
are down 40%, the number of servers 
has been cut from 100 to about 50, and 
head count is 20% lower. 

“Consolidation and standardization 
combined with a focus on storage 
management as an ongoing activity 
will enable most organizations to cut 
storage costs,” says Rajecki. 


No End in Sight 


Simple economics dictates planning 
for the long haul. Cisco, for instance, 
recently consolidated its storage bud- 
get across all business units and has a 
single budget for all enterprise storage 
needs. “Because storage is such a ma- 
jor cost, it requires long-term planning 
to keep costs under control,” says Cis- 
co’s Williams. 

Similarly, the 45th Space Wing is re- 
fusing to rest on its storage laurels. It 
implemented backup to virtual tape 
via Alacritus Software’s Securitus vir- 
tual tape appliances. It also added an- 


| other 28TB of mixed Fibre Channel 


and ATA storage to support Exchange 
2003 clusters, virtual tape backup and 
cross-site mirroring (using EMC’s 


| SnapView and SAN Copy). New tape 


libraries from Qualstar Corp. were 
added using Super Advanced Intelli- 
gent Tape technology to increase per- 
tape density and reduce off-site vault- 


ing charges. 


“Estimated ROI is 14 months, with a 
three-year savings of approximately 
$400,000 just in tape and vaulting 
charges,” says Exline. @ 49416 





Robb is a freelance writer in Los Angeles. 
Contact him at drewrobb@attbi.com. 





MORE COST-CUTTING TIPS 


Industry experts say reducing storage costs is a step- 
by-step process that begins with planning that is 
diligent and ongoing. Here are five key steps: 

qd QuickLink 32849 

“se” www.computerworld.com 


storage consolidation, without the 
headache of Fibre Channel devices 
and cabling, by enabling block-level 
data delivery over IP networks. 

“Companies should be running, 
not walking, to iSCSI,” says Steve 
Duplessie, an analyst at Enterprise 
Strategy Group. “The payback is so 
strong and so fast that enterprises 
will look silly if they wait. And iSCSI is 
driving prices down for [Fibre Chan- 
nel] networks.” 

One convert is Denver Health 
Medical Center. Its IT environment 
consists of 16 buildings connected 
via Gigabit Ethernet, 22 community 
health clinics connected via Sonet, 
166 clustered servers (125 Windows, 
20 Unix and various others) and two 
SANs - a Fibre Channel SAN and an 
IP SAN. 

“We found FC SANs to be expen- 
sive to implement, and they required 
specialized training and technicians,” 
says Jeff Pelot, chief technology offi- 
cer at Denver Health. “An IP SAN is 
so much more affordable, and impie- 
menting one is like building some- 
thing with Lego.” 

Pelot says he doesn’t think his fa- 
cility requires FC buildout, especially 
now that IP technology has matured. 
However, Denver Health fully intends 
to maintain its existing SAN. With the 
infrastructure in place, it makes no 
sense to eliminate it. Instead, the fa- 
cility chose to expand its storage plat- 
form with an IP SAN from LeftHand 
Networks Inc. in Boulder, Colo. 

Glenn Exline, manager of ad- 
vanced technology for the Air Force's 
45th Space Wing, points out that the 
big advantage of a Fibre Channel 
SAN is that it removes storage and 
backup traffic from the network. By 
doing so, his organization sped up its 
existing network. 

“Allowing user access to the same 
data network that is harnessed for 
storage is a big mistake,” says Exline. 

However, Pelot says that perfor- 
mance turned out to be far less of a 
problem than many feared. “Although 
1/0 is very slightly down compared to 
the FC SAN, the users have never no- 
ticed the difference,” he says. 

- Drew Robb 
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“| was able to take an existing facility 
we had and put $200,000 in it and 
install like servers with a 16-month 
payback on our investment,” says 

of Teppco Partners. 
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Long Distance, 
Short Money 


Storage over IP provides a 
cheaper, faster alternative for data 
backup. By Lucas Mearian 


ATURAL DISASTERS and gov- 

ernment regulations have 

put pressure on companies 

to back up data farther away 

from their main data centers 
than they do now, but achieving that 
goal can be pricey. Tape is one option, 
but it’s slow to restore. Dedicated net- 
works can replicate data over a WAN, 
but at a bandwidth price. 

In their quest for cheaper alterna- 
tives, some companies are turning to a 
still-developing option. Storage over IP, 
or the replication of block-level data 
over leased virtual private networks, 
allows users to select the type of wide- 
area service that best meets their bud- 





get and application requirements. 
“It’s a lot faster than tape. And IP is a 


| lot less expensive than a dedicated 
| line,” says James Opfer, an analyst at 


Gartner Inc. 
The three main long-distance trans- 


| mission protocols — Internet SCSI 


(iSCSI), Fibre Channel over IP (FCIP) 
and Internet Fibre Channel Protocol — 
are all significantly different, but they 


| provide a common function: transport- 


ing block-level storage over an IP net- 
work, which allows administrators to 
use inexpensive Ethernet-IT'CP/IP net- 
works to transport and access storage 
over LANs, WANs or metropolitan- 
area networks. 





ISCSI, which transmits block-level 
data directly over Ethernet, is primari- 
ly a server-to-storage interconnect 
within the data center. It takes advan- 
tage of ubiquitous Ethernet networks 
to consolidate Windows and Linux 
server backups by connecting LANs to 
storage-area networks (SAN). New 
vendors are now offering arrays that 
use iSCSI as a tunneling protocol to 
transmit over long distances. 


Savings Spots 

The greatest savings in using IP to 
transport data between data centers 
comes from reduced bandwidth. Long- 
distance replication of block-level data 
can use IP, Synchronous Optical Net- 
work (Sonet) and Asynchronous Trans- 
fer Mode (ATM) networks to transmit 
data, with little difference in price as 
long as it’s not a dedicated line. 

“Tt’s not the hardware. Every time I 
talk to people, they say it’s the cost of 
bandwidth services,” says Opfer. 

But exact savings are hard to pin 
down: Opfer says bandwidth costs can 
vary widely by region. If you’re using 
“dark fiber,” or surplus fiber-optic 
cable, “you’re going to get wild swings 
in the price,” he says. And with IP, 
there’s no need to hire Fibre Channel 
network administrators or buy switch- 
es or host bus adapters to create the 
network interface. 

But financial firms and other compa- 
nies dealing with sensitive data are 
still squeamish about adopting a stor- 
age-over-IP framework, says Dianne 
McAdam, an analyst at Data Mobility 
Group LLC in Nashua, N.H. “What I do 
see changing is the small to medium- 
size businesses, where in the past they 
looked at doing replication and then 
got the price tag and said, ‘Oh my 
God,’” she says. 

Some large companies say the cost 
benefits outweigh the risks. For exam- 


ple, Don Bolton, manager of infrastruc- | 


ture and systems services at Teppco 
Partners LP, an energy company in 
Houston, understands costs issues 
associated with disaster recovery. 
Teppco had been paying $250,000 to 


| $500,000 a year to SunGard Data Sys- 


tems Inc. in Wayne, Pa., to ensure that 
should the company’s systems go 
down, they could power up in another 
region without losing data. 

Earlier this year, Bolton says, he de- 
cided that Teppco could perform that 
chore itself by replicating mission- 
critical, block-level data via a T1 line 
between data centers in Houston and 
Tulsa, Okla. — a distance of about 500 
miles. That move has cut his costs by 


| more than half with a quick return on 
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investment. “I was able to take an ex- 
isting facility we had and put $200,000 
in it and install like servers with a 16- 
month payback on our investment. 
And it’s allowed us to grow our infra- 
structure,” Bolton says. 

Teppco asynchronously replicates 
block-level data from Oracle and SQL 
databases that reside on clustered ar- 
rays from Network Appliance Inc. that 
use NetApp’s SnapMirror application. 
“It’s pretty interesting technology. If I 
was a superlarge shop at Continental 
Airlines or something, with hundreds 
of terabytes, I don’t know if this would 
be the solution. But with this size, it is 
perfect,” Bolton says. 

In asynchronous mode, SnapMirror 
provides read-only, online replication 
of a source file system (volume or quo- 
ta tree level). In the event of a disaster, 
Bolton says the mirror site could be 
used as the primary, converting the 
SnapMirror replica into a writable file 
system and replacing the original. 


IP Payoff 


Edward Jones & Co. has begun to reap 
the rewards of three years of work and 
an $80 million investment in a storage- 
over-IP network [QuickLink 49629]. 

The system is replicating up to 700GB 


| of data daily to a fully redundant back- 


up site located 1,600 miles away from 
the brokerage’s main data center, near 
St. Louis. Edward Jones has created a 
secondary site in Tempe, Ariz., that’s a 
replica of the primary data center, com- 
plete with 450TB of SAN-based data. 

Bill Hayden, director of data services 
at Edward Jones, which is using FCIP 
over ATM to tunnel its data across 
the U.S., says prices have continued 
to drop on network bandwidth. “It 
doesn’t matter whether it’s running 
IP, Sonet or ATM,” the prices are the 
same, he says. 

The payback? All of Edward Jones’ 
Oracle databases are replicated nation- 
wide in under five seconds. File ser- 
vices are replicated every four minutes, 
and mainframe databases are typically 
replicated in 30 minutes. The company 
says it can flip a switch and begin using 


| its secondary site as its primary one. 


“Our sticking point is our [VSAM 
flat files] on our mainframe,” Hayden 
says. VSAM flat files still take four 
hours to replicate, a problem that Hay- 
den says could be resolved by updating 
Edward Jones’ EMC Symmetrix arrays 
and replication software. 

“There are always issues,” he says. 
“We're always looking to get the data 
there faster and looking for ways to get 
the data to the point where we can up- 
date it at either site.” @ 49821 





BRAND NEW. 
NOT NEW BRAND. 


Introducing the Fujifilm 3592 enterprise-class data storage tape. 


While Fujifilm 3592 is a brand new addition to our full line of superior quality data storage media, it comes from a company 
that is anything but a new brand. In 1995, our technology enabled the first gigabyte-class metal particle enterprise 1/2” tape. 
Since then, steady innovation has culminated in a high-end 1/2" tape with NANOCUBIC Technology, the magnetic coating 
technology leveraged by world-leading hardware manufacturers in development of their latest-generation enterprise-class 
drive systems. Specify Fujifilm on your next high-end tape order. It's the brand that other brands trust. 


a storage media, visit us at: www.fujifilm.com nanocubic 


To find out more about our complete line of reliable data 


i) FUJIFILM 


the property of their respective owners 
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T ATA AIRLINES INC., 
tice of buying refurbished 
storage systems started small, 
with the purchase of a work- 
group-size disk array. Over 
the past six years, the $1.2 billion air- 
line bought more and more used stor- 
age equipment, including enterprise- 
size storage systems, tape libraries and 
eventually Fibre Channel storage-area 


the prac- | 


www.computerworld.com 


Paul Smith, director of information 


| services at Indianapolis-based ATA. 


The result: savings that add up to at 
least 50% off list price for used storage 
components and 60% to 70% savings 
for used storage systems. 

“Why pay top dollar when you can 
let someone else take the hit on new 
equipment?” says Chuck Copell, man- 
ager of hardware support services at 


| Affiliated Computer Services Inc., a 

| $4 billion outsourcer in Dallas. “Stor- 

| age hardware depreciates as fast or 
faster than an automobile. Whenever 
possible, I like to buy used equipment.” 

The hottest used items include tape 
and optical libraries, as well as other 
archive and backup products, where 
performance is less critical and the ob- 
| soiescence cycle is slower, according 
| to resellers. But the market for newer 
| equipment, such as Fibre Channel 
SAN switches, is also active, and mid- 
range disk arrays, such as IBM Shark’s 
and Hitachi Data Systems Corp.’s 
Thunder system, also sell well. 

The benefits go beyond cost savings 
to include faster acquisition cycles and 
more-flexible maintenance programs. 
But there are risks involved. Before do- 
ing business with storage remarketers, 
users should consider the answers 
to these common questions about 
secondhand storage equipment. 


Is It Reliable? 


This is perhaps the first question 

asked by people who have never 

purchased secondhand storage. 
But experienced users have no reser- 
vations about reliability, as long as 
they’re purchasing from a reputable 
vendor that sets up, tests and refur- 
bishes the systems. The vendor should 
also offer a warranty that the equip- 
ment is in working condition upon ar- 
rival at the customer site and possibly 
even for 30 days until the system 
comes under a service contract with 
the manufacturer or a third-party 
provider. Some resellers will also offer 
longer warranties on certain equip- 
ment for a higher price. 

In any case, “you have to be comfort- 
able with the vendor you choose,” says 
Smith. “It could make all the difference 
if the system has been in a climate- 
controlled environment as opposed to 
a hothouse where the disks have been 
spinning in 100-degree heat.” 


Can | Get a Service 
Agreement? 
It’s important to determine 
beforehand if the equipment 
you're buying is eligible for mainte- 
Continued on page 42 


networks. Today, “there really isn’t a 
case where we wouldn't consider pre- 


viously owned storage systems,” says 


[oo 
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Buying used storage 


equipment is 

cheaper, but riskier, 

than buying new 
S gear. By Mary Brandel 
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“Best Practice” Storage Users STORAGE NETWORKING WORLD 
to Be Announced October 25th Best Practices 


. ae World IN STOR AGE 


Storage Networking World (SNW), in conjunction with Computerworld Lacan aaaiitad hch deh ats 
and the Storage Networking Industry Association (SNIA), 
proudly presents the fifth SNW “Best Practices in Storage” 
Awards Program. This program honors ten IT user “best practice” 
case studies selected from a field of qualified finalists. 





Two awards will be presented in each of the following five categories: 


Systems Implementation 


Recognizes the successful design, implementation and management of an interoperable environment 
This category also demonstrates the ability to source from multiple vendors 


Storage Reliability and Data Recovery 


Acknowledges implementation strategies and programs to insure highly available information and data access 





Data Lifecycle Management 


Exemplifies solutions and processes to manage the ir information over its lifecycle. 


Industry Regulation Compliance and Corporate Governance 


Spotlights solutions being deployed to meet or exceed industry regulations specified by the SEC, Patriot Act, HIPAA, 
Sarbanes-Oxley, DoD, and CFR. 


Innovation and Promise 


Successful “pioneering” of leading/bleeding-edge storage networking technology will be recognized in this category 
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St e Networking World 
STORAGE NETWORKING WORLD sit worse. 


October 25-28, 2004 - JW Marriott Grande Lakes Resort - Orlando, FL 
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Stick With What You Know 


WHEN ATA AIRLINES purchased 
its first SAN, the equipment wasn’t 
available on the refurbished market, 
and looking back, that’s a good 
thing, says Paul Smith, director of 
information services. 

After installing the new equip- 
ment, the SAN didn’t perform up to 
its published specifications, and the 
manufacturer had to be called in for 
assistance. “Having that extra layer 
of the remarketer could have made it 
difficult,” Smith says. “We wouldn't 
have had the clout, and the problem 


Continued from page 40 

nance from the original manufacturer 
or from a reputable third party. “Some 
of the big vendors like HP, IBM and 
Sun are very strict about what they 
will and won’t support as far as the age 
of the equipment and the firmware and 
its interaction with their more modern 
equipment,” Copell warns. 

Vendors may also provide mainte- 
nance contracts more readily if you 
buy from an authorized reseller of 
their equipment. Otherwise, they may 
require a site visit and an audit to per- 
form necessary upgrades or firmware 
changes — for a price, of course. 

You should also ensure that all the 
drives within a storage system are 
original manufacturer drives, or the 
manufacturer won't place them under 
maintenance agreements, according to 
Robert Davie, founder of ITParade.- 
com Inc., a Web-based marketplace for 
refurbished computer equipment in 
Cary, N.C. For example, a Sun Micro- 
systems array must have all Sun- 
manufactured drives in it. 

IBM is one of the only vendors with 
well-defined processes for servicing 
the secondhand market, says James 
Davie, a vice president at Canvas Sys- 
tems, a reseller in Norcross, Ga. It of- 
fers a “banding process,” by which IBM 
certifies that the system is “mainte- 
nance service qualified” at the time of 
the sale. The system arrives at the cus- 
tomer site with a silver band around it, 
IBM engineers implement the system, 
and IBM provides the maintenance 
contract. This comes at an additional 
cost of about $1,000, according to 
Doug Rengel, a consultant at Xerxes 
Computer Corp., a refurbished com- 
puter reseller in Bloomington, Minn., 
so customers might choose this option 
only for higher-end equipment. 





may not have resonated with the 
vendor.” The lesson: If you're work- 
ing with an emerging technology or 
one you're not intimately familiar 
with, your risk factors rise. 

Another point: In the refurbished 
market, you don’t have the honey- 
moon period when you can call in all 
of the vendor's resources. 

ATA bought its first SAN four years 
ago. Since then, Smith has turned to 
the refurbished market when he has 
needed an additional SAN array. 

~- Mary Brande! 


Some companies, such as ATA Air- 
lines, don’t rely on vendors for service 
and instead maintain their equipment 
themselves. ATA even keeps its own 
inventory of spare parts. “We’re an 
extreme case,” Smith acknowledges. 

Bruce Caswell, vice president of 


| marketing at World Data Products, a 


refurbished computer reseller in Min- 
netonka, Minn., says roughly 80% of 
his company’s customers put their 
hardware on a maintenance contract, 
while 20% are self-maintainers. Of 
those that opt for maintenance con- 
tracts, most turn to credible third- 
party providers such as Northrop 
Grumman Corp., DecisionOne, Storage 
Technology Corp. and General Electric 
Co. to lower their cost of maintenance. 


Should | Ex 
Vendor Push-back? 


Particularly if you’re purchas- 

ing a high-end system, many 
vendors will try to dissuade you from 
purchasing refurbished equipment by 
threatening exorbitant “recertifica- 
tion” fees or even refusing to service it. 
“I know one large insurance company 
that got strong push-back from Sun at 
the CFO level and decided not to pur- 
chase refurbished because of that,” 
says Robert Davie. On a StorageTek 
L700 tape drive, the relicensing fee 
can reach $2,200, he says. 

According to many observers, the 
vendor with one of the worst reputa- 
tions in this regard is EMC Corp. 
“EMC has a subtle way of controlling 
the market in its own used gear,” says 
John Webster, founder of the Data 
Mobility Group LLC, a consultancy 
in Nashua, N.H. “They say that the 
microcode to run the machine is not 
transferable and that you need to buy 
a new microcode license — which, 





by the way, ain’t cheap.” 

EMC defends its relicensing require- 
ments. “Our systems are intelligent 
storage systems that have software in- 
corporated into them, and it is stan- 
dard practice throughout the industry 
that the software license doesn’t get 
transferred when the hardware gets 
transferred,” an EMC spokesman says. 
“The licensing also ensures that the 
product operates as it’s supposed to 
for the customer.” 

It’s important to keep in mind that 
these types of fees are negotiable, re- 
sellers say, and that salespeople can 
reduce or even waive them. A good 
negotiating point is to suggest that you 
might opt for third-party maintenance, 
meaning the vendor will lose the ser- 
vice revenue as well. Robert Davie rec- 
ommends contacting the field service 
rep instead of the salesperson, since 
the service rep is typically compensat- 
ed on the service contract revenue and 
is more likely to negotiate with cus- 
tomers to reduce relicensing fees. 

Smith advocates having a frank dis- 
cussion with your vendor about servic- 
ing issues. With his company’s storage 
vendor, Hewlett-Packard Co., “it took 
some time,” he says. “There were light- 
ly intimated threats of refusal to put it 
under warranty and tack on recertifi- 
cation costs.” How the vendor reacts, 
Smith says, can either cement the rela- 
tionship or end it. 


Will There Be 
Compatibility Issues? 
One gotcha on used storage 
equipment is compatibility 
with newer equipment, particularly in 
the areas of firmware revisions and in- 
terface compatibility. “If you have the 
luxury of time, it’s easy enough to take 
a look at your operating systems and 
firmware revisions and patch-level kits 
and determine whether the equipment 
will be an easy fit,” Affiliated Comput- 
er Services’ Copell says. “But around 
here, things are on a deadline mentali- 
ty, and that’s when you find problems.” 
In some cases, resellers load the lat- 


Although the size of the used storage 
Ca im ary MOR ere Ct ecm eleT = 
estimate puts it at about 5% of the 
ONCE LCS 
according to Robert Davie, founder 
of ITParade.com. The overall market 
is expected to reach $7.5 billion in 
the U.S. this year, according to Bruce 
Caswell, vice president of marketing 
at World Data Products. 
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est firmware revisions onto the equip- 
ment they sell; in others, their tech 
support staffs can help with fixes when 
problems are discovered. 

At ATA Airlines, Smith’s staff con- 
ducts its own research into firmware 
requirements. “We need to be pre- 
pared to understand why you can have 
two disks that carry the same part 
number, and one works while the other 
doesn’t,” he says. 

Also keep in mind that standards 
change. “You can mistakenly assume 
that a piece of old gear can do some- 
thing that’s commonplace today,” says 
Marc Farley, president of Building 
Storage Inc., a consultancy in Saratoga, 
Calif. For instance, an older Fibre 
Channel host bus adapter might be 
available for $20, but it’s useless if it 
doesn’t support a fabric log-in, which 
most SANs use today. 


Can | Trust the 
Remarketer’s Staff? 


The caliber of vendors in the 

refurbished market can vary 
widely, Smith says, and the best way to 
know what you're getting is to check 
the résumés of the technical staffers. 

“We've relied on [World Data Prod- 
ucts] heavily to ensure things work 
when they got here and do some inte- 
gration,” he says. “In essence, the re- 
marketer’s staff is an extension of your 
staff, so I’d advocate looking carefully 
at the vendor’s hiring practices and the 
quality of their employees.” 

In a long-term relationship, a re- 
marketer can help you decide what 
will work best with your environment 
and what options will save you the 
most money. “There are tons of pre- 
requisites for purchasing storage — 
what are you attaching to, what storage 
adapters are you using, what SAN de- 
vices are you using,” says James Davie. 

“Sometimes, the people selling in 
the used market have no idea what 
they’re promoting,” Farley says. For 
instance, when he has purchased on 
eBay, he’s been given data sheets that 
don’t match the product being sold. 
“Clearly, they had no idea what they 
were doing, but they were sure eager 
to sell it,” Farley says. @ 49422 


Brandel is a Computerworld contribut- 
ing writer in Grand Rapids, Mich. Con- 
tact her at mary.brandel@comcast.net. 


USED EQUIPMENT MARKET 


Prices in the secondary market can range from 20% 
to 30% of manufacturers’ suggested prices for new 
equipment: 
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IT’S STORAGE. IT’S FLEXIBLE. IT’S YOU. 


Yes, you. Whatever is vital to you— x-rays, blueprints, customer information — storing 
vast amounts of data is important. Even more important is access to that information. 
Having data right at your fingertips. Weicome to the on demand world enabled 
by IBM TotalStorage” systems. Where your servers and storage work together to 
better manage data across your organization, giving you a broad range of storage 
options. Thus, a total recognition of TCO, scalability and flexibility. IBM TotalStorage 
is for you. Find and learn the whole story at ibm.com/totalstorage/total 


IBM ‘TotalStorage’ 


IBM and TotalStorage are trademarks or registered trademarks of International Business Machines Corporation in the United States and/or other countries. Other company, product and service names may be trademarks or service marks of 
others. ©2004 IBM Corporation. All rights reserved. 
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Grid Storage 


DEFINITION 


Grid storage, analogous to grid computing, is a new model for 
deploying and managing storage distributed across multiple sys- 
tems and networks, making efficient use of available storage ca- 
pacity without requiring a large, centralized switching system. 


BY RUSSELL KAY 
E ROUTINELY talk 
about the electri- 
cal power grid or 
the telephone 
grid, and it’s 

pretty clear what we mean — 

a large, decentralized network 

with massive interconnectivi- 

ty and coordinated manage- 
ment. A grid is, in fact, 

a meshed network in 

which no single cen- 

tralized switch or hub 
controls routing. Grids 
offer almost unlimited 
scalability in size and 


CK 


to a computer network lets us 
harness available but unused 
resources by dynamically allo- 
cating and deallocating capac- 
ity, bandwidth and processing 
| among numerous distributed 
computers. A computing grid 
can span locations, organiza- 
tions, machine architectures 
and software boundaries, offer- 
ing power, collabora- 
tion and information 
access to connected 
\\ users. Universities and 
D ~ research facilities are 
using grids to build 
what amounts to su- 


performance because they percomputer capability from 


aren’t constrained by the 
need for ever-larger central 
switches. Grid networks thus 
reduce component costs and 
produce a reliable and re- 
silient structure. 

Applying the grid concept 


The Grid 
Storage 
Difference 


Let’s consider a simple net- 
work of 16 storage nodes in 
a high-availability environ- 
ment, where all nodes re- 
quire access to one anoth- 
er. The usual way to design 


this woud be with two 16-prt 
switches (the second one for fail-over) in a star configuration. Thus each switch is con- 
nected to each of the 16 nodes and each node is connected to both switches, and we have 
32 wired connections and two expensive switches. There are two possible paths between 
any two nodes. If we want to expand the network, we can add more nodes only by also 


| PCs, Macintoshes and Linux 
| boxes. 

After grid computing came 
into being, it was only a matter 
of time before a similar model 
would emerge for making use 
of distributed data storage. 


\ 


f 





! 


| Most storage networks are 


built in star configurations, 
where all servers and storage 
devices are connected to a sin- 
gle central switch. In contrast, 
grid topology is built with a 
network of interconnected 
smaller switches that can 
scale as bandwidth increases 
and continue to deliver im- 
proved reliability and higher 
performance and connectivity 
(see diagrams). 


What Is Grid Storage? 


Based on current and pro- 
posed products, it appears 
that a grid storage system 
should include the following: 
Modular storage arrays: These 
systems are connected across 
a storage network using serial 
ATA disks. The systems can 
be block-oriented storage 
arrays or network-attached 





storage gateways and servers. 
Common virtualization layer: 
Storage must be organized as 
a single logical pool of re- 
sources available to users. 
Data redundancy and availabil- 
ity: Multiple copies of data 
should exist across nodes in 
the grid, creating redundant 
data access and availability in 
case of a component failure. 
Common management: A sin- 
gle level of management 
across all nodes should cover 
the areas of data security, mo- 
bility and migration, capacity 
on demand, and provisioning. 
Simplified platform/management 
architecture: Because common 
management is so important, 
the tasks involved in adminis- 
tration should be organized in 
modular fashion, allowing the 
autodiscovery of new nodes in 
the grid and automating vol- 
ume and file management. 


Three Basic Benefits 


Applying grid topology to a 
storage network provides 
several benefits, including 
the following: 

Reliability. A well-designed 
grid network is extremely re- 
silient. Rather than providing 
just two paths between any 
two nodes, the grid offers mul- 
tiple paths between each stor- 
age node. This makes it easy 
to service and replace compo- 
nents in case of failure, with 
minimal impact on system 


16-node grid storage configuration 


the switches, there are many possible alternate paths to connect any two nodes. The 
arrangement is more resilient and less susceptible to catastrophic failure than convention- 
al configurations. To expand the network, we can add more nodes and more small switch- 
es without having to re-engineer the whole structure. (Note: We could have achieved a 
similar result by configuring this with four eight-port switches.) 





availability or downtime. 

Performance. The same fac- 
tors that lead to reliability also 
can improve performance. Not 
requiring a centralized switch 
with many ports eliminates 
a potential performance bot- 
tleneck, and applying load- 
balancing techniques to the 
multiple paths available offers 
consistent performance for 
the entire network. 

Scalability. It’s easy to ex- 
pand a grid network using 
inexpensive switches with 
low port counts to accommo- 
date additional servers for in- 
creased performance, band- 
width and capacity. In essence, 
grid storage is a way to scale 
out rather than up, using rela- 
tively inexpensive storage 
building blocks. For more on 
scaling up vs. scaling out, see 


QuickLink a5050. @ 49829 


Kay is a Computerworld con- 
tributing writer. You can reach 
him at russkay@charter.net. 


HP LEADS THE WAY 


For more on the first grid storage product, 
from Hewlett-Packard, and the activities of 
other vendors, visit our Web site: 
QuickLink 49972 
“4 www.computerworld.com 


Are there technologies or issues you'd like 
to learn about in QuickStudy? Send your 
ideas to quickstudy@computerworld.com 


To find a complete archive of our 
QuickStudies, go online to 
@ computerworld.com/quickstudies 


in a grid arrangement, we 
could arrange the nodes in 
four groups of four, each 
connected to a simple 
four-port switch. We would 
also use four additional four- 
port switches, each connect- 
ing to one node in each of the 
four groups. Now we have 32 
wired connections (the same 
as before), but eight four-port 
switches instead of two 16- 
port units, and each node is 
connected to two switches. In 
the event of a failure of any of 
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The Almanac 


Aneclectic collection of research and resources. | 





From the Labs: 
The Holographic Disc 


= OPTWARE CORP. in Japan (www. 
optware.co.jp/english) has come out 
with a prototype of what it calls the 
world’s first holographic recording 
disc for reliable recording and play- 
back of digital movies. The disc 
(above, left) is 12 cm in diameter — 
the same as DVDs and CDs — and 
could be on the market for commercial 
use in the first quarter of 2006 with a 
capacity of 200GB. That’s the good 
news. The bad news is that the re- 
corders are expected to cost about 
$20,000, and the discs will be $100 
each. A less-expensive version for 
home use could be on the market as 
soon as 2007, the company says. 

That could be good for consumers 
but bad for electronics companies, 
which will be trying to persuade buy- 
ers at about the same time to invest in 
blue-laser storage discs like Blu-ray 
Disc or HD-DVD, which have about 
one-fifth the capacity. 

Future development of the Holo- 
graphic Versatile Disc technology 
could boost its capacity to 1TB of data, 
Optware says. — Martyn Williams and 
Paul Kallender, IDG News Service 


Storage Capacity: 

The Tipping Point 

« How does your organization compare with 
these benchmarks? An IDC study of 471 
North American organizations found 
that, on average, 48% of their total 
storage capacity is currently utilized, 
and the trigger point for deciding to 
add more storage is 74%. This means 
that, on average, their storage systems 
are nearly “three quarters full” when 
they add storage capacity. The insur- 
ance and transportation industries 





push the threshold further than other 
vertical markets, saying their trigger 
point for adding storage is when it 
exceeds 81% utilization. 

The insurance industry appears ripe 
for additional storage capacity, IDC 
says, because a quarter of the insur- 
ance companies reported that at least 
80% of their capacity is currently used. 


Events 
® Storage Networking World, Fall 2004 


www.snwusa.com 
Oct. 25-28; Orlando 





= High Performance Computing, 
Networking and Storage Conference 
www.sc-conference.org/sc2004 
Nov. 6-12; Pittsburgh 





= Network Storage Conference 2005 
www.networkstorageconference.com 
March 7-9, 2005; Milpitas, Calif. 


Hidden Costs of 

E-mail Archiving 

# Regulatory requirements are helping 
the e-mail archiving technology mar- 
ket to double this year, according to 
The Yankee Group in Boston. But large 
corporations will need to factor in 
increased storage, systems, network- 
ing, software and management costs, 

a bulletin from the research firm says. 


i irvalye truce Mnl eect 
CaN MEUM MuLelecmer- 1) 
storage in your organization? 


BASE: 89 


Silt tas 


For example, “an enterprise with 5,000 
employees will require nearly 4TB of 
storage every year” for e-mail archiv- 
ing, the report says. “This will require 
storage management software and at 


| least one full-time storage administra- 
| tor.” And if the company is using Fibre 
Channel storage systems, it may need 
to add networking equipment to the 

| list, The Yankee Group says. @ 49812 





IT’S COMPACT. 
ITS AFFORDABLE. 
IT’S YOU. 


l’s the enterprise-class IBM TotalStorage” DS6800 system. 
It's as low as haif the price' and takes up as little as 5% of 
the space’ of that “other” enterprise storage offering (the EMC 
Symmetrix DMX800). With Power Architecture” technology 
and a surprisingly small footprint, it's designed to deliver 
lower costs. Is it storage or is it a strategy? It’s both. Its IBM 
TotalStorage at its best. 


Want to see for yourself? In person? 


Learn more at the IBM TotalStorage Roadshow. With product 
presentations and the latest storage news. Don't miss out. 
See for yourself how you could benefit when everything 
works together. For more information or to register, go to 
ibm.com /totalstorage/save 


IBM ‘TotalStorage® 


Price comparison based on U.S. list prices. Actual customer prices may vary. 
Compares IBM TotalStorage DS6800 system with 2TBs Operating Environment 
License software, 1.16TB using 146GB 10K FC Drives. 4GB of memory, 19 inch rack 
and FICON Attachment license (zSeries support), and EMC Symmetrix DMX800 with 
2TBs Control Center Management software, 1.16TB using 146GB 10K FC Drives, and 
4GB of memory. List prices for EMC Symmetrix obtained from ideas International, 
www.ideasinternational.com, as of 10/1/04. IBM TotalStorage DS6800 may be used 
as a stand-alone unit, or mounted into a rack. Size comparison is based on stand- 
alone use. IBM, TotalStorage and Power Architecture are trademarks or registered 
trademarks of International Business Machines Corporation in the United States 
and/or other countries. Other company, product and service names may be 
trademarks or service marks of others. ©2004 IBM Corporation. All rights reserved. 
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SNAPSHOTS 


Top of Mind 


{T managers say the following 
storage topics will be 
“extremely important” over 
the next three months: 
Disaster recovery/business continuity 
AIR 5465 


— 


BASE: 91|T managers; multiple responses allowed. 
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Storage Problems 


IT managers say these are the 
top three storage headaches: 


Data growth 
SE 55°) 


Insufficient IT staff 
GR 26% 


Yawning Over IP 


IT managers don’t seem very 
excited about IP storage, with many 
of them rating it as neutral or un- 
important for the next six months. 


7 Extremely 


important 


iN ele-1e-1 
important 


16% 


BASE: 91|T managers 


SOURCE: Computerworid’s IT Leader 
Research Panel, August 2004 
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MARK HALL 


Long Live Tape 


’"VE BEEN HANGING AROUND THE RUMOR-MONGERING, low-cost disk drive 
crowd lately, so I started to think that their ATA drives are making tape obsolete. 
And when the information life-cycle management forces added their whispers 
about the improved performance and low cost of archiving data to fixed disks, 
I became a fervent convert to the notion that tape is all but dead. 
In fact, I had intended to write something like my “Farewell Floppy” column of 
nearly five years ago, in which I (correctly) dismissed the floppy disk as credible IT 
technology. I had the similar self-righteous vigor of a convert as I set forth to write my 


“Death to Tape” column. 

Alas, I did my research before writing. (A generally 
wise, although not always accomplished, task among 
journalists.) Tape is far from dead. If anything, thanks 
to continued technology improvements and recent 
corporate management shenanigans and the legisla- 
tive responses to them, tape for backup and archival 
storage is experiencing a resurgence. 

Take IBM’s recent tape business. It has seen four 
consecutive quarters of double-digit upticks in rev- 
enue. And its main competitor for tape systems, Stor- 
age Technology Corp., has announced 16 consecutive 
quarters of year-over-year earnings growth. 
Those aren’t the numbers of a technology 
in a tailspin, nor are they what I expected 
to find. 

While technology advances and lower 
costs help keep tape competitive against 
ATA drives despite drawbacks in perfor- 
mance, it’s the work of politicians that is 
giving tape renewed purpose in life. After 
all, they’ve passed Sarbanes-Oxley, the 
Health Insurance Portability and Account- 
ability Act and other audit-friendly legisla- 
tion, seemingly with tape in mind. 

“A couple of years ago, legislation on cor- 
porate governance changed things,” says 
Barry Rudolph, IBM’s vice president for tape storage 
systems. Changed indeed — in a good way for tape 
storage makers. 

That’s because top management wants IT arch- 
ivists to err on the side of saving too much informa- 
tion rather than too little and to spend as little as pos- 
sible in the process. For today (and tomorrow), that 
means tape. A 200GB ATA drive sounds cheap at 
$140, but a $40 tape holds just as much uncompressed 
data. By the end of the year, IBM will be shipping a 
400GB version. 

Over at Fuji Photo Film USA in Valhalla, N-Y., Rich 
Gadomski tells me that his company has already 
demonstrated ITB uncompressed capacity on a sin- 
gle tape cartridge and expects to have it on the mar- 
ket in a year or two. And both Fuji and IBM claim 
that single tapes with 10TB to 15TB of storage will 
ship by 2010. 

Plus, tape archiving systems use 100% of a tape’s 
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capacity, while disk-to-disk approaches risk duplicat- 
ing the same inefficient storage utilization rates on 
backup disks as on production ones. 

With those kinds of capacity and efficiency num- 
bers, it’s clear that low-end drive makers will forever 
play catch-up to tape when it comes to the storage 
capacity/cost ratio. Plus, you don’t have to add the 
incremental expenses of a full RAID storage system, 
cooling technology and electricity that you need to 
make a disk drive useful. Tape is happy just to sit idle, 
drawing no power, requiring no special HVAC support. 

ATA disk drive makers brag that their 
low-cost technology has at least 100 times 
the performance that you'll experience re- 
trieving data from tape system. However, 
in the world of compliance-driven storage, 
audits aren’t done in real time. You can 
usually retrieve requested information in 
a few hours — or days — and still meet 
user needs. That’s right up tape’s alley. 

Tape has an obvious portability advan- 
tage over disk. And it offers less-obvious 
protection against disk-based viruses be- 
cause you can always revert data on tape to 
a state prior to an infection. But an infected 
disk affects the whole drive, regardless of 
what state the data might be in. 

So, it looks like you'll be using tape systems for the 
foreseeable future. Instead of seeking ways to dump 
tape, you need to develop tape strategies with the 
same zeal you have for plans to migrate and upgrade 
operating systems and applications. 

Tape media might reliably retain data for 30, even 
50 years. But you shouldn’t count on it, especially be- 
cause the tape subsystems that read and transfer the 
data change at a much faster rate. 

Although applications vary, most companies should 
overhaul their tape systems every 10 to 15 years. Check 
to make certain that the new devices efficiently work 
with old tapes. Also, every 15 to 20 years, bring all 
your archived data onto newer tape, choosing data 
formats that abide by industry standards to better en- 
sure future compatibility. 

Born in an IBM lab back in 1952, tape, it seems, will 
never die. @ 49686 





Being vigilant helps avoid surprises, 
in SANs as in life. 


There are probably things happening right now on your SAN that could lead to 
appalling performance or a complete system crash. 


You don’t know when it will happen. 

You don’t know how it will happen. 

But when it does happen, you'll wish you were aware things were building up to give 
you a nasty surprise, an expensive surprise. 


Research shows that SAN downtime can cost organizations $100,000 per minute, 
or more.* Finisar's NetWisdom and Xgig solutions help you avoid these costs by 
monitoring your SAN to stop degradation, CRC errors and events that impact your 
most critical applications, business data and transactions. 


View our web seminar, including a customer case study and demo of NetWisdom 
by visiting www.finisar.com/plan 


Avoid nasty surprises. Monitor your SAN and hang on to your budget. 


= Source: Fabric Computing: Beyond the N-tier Data Center, RBC Capital Reports Oct 2003 


Finisar 


Finisar has been speeding up networks and 
delivering best-of-breed products and testing 
solutions since 1988. NASDAQ: FNSR. 


www.finisar.com/plan 
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COMPUTERWORLD HAS BEEN NAMED 
UNL Yale ada 


Every year the prestigious American | 
Society of Business Publication Editors 
(ASBPE) selects one publication with 


- 80,000 or more subscribers to receive 


this top honor. The award can go to any 
business publication in any industry 
category, and we won! We are proud 
that our ongoing commitment to 
editorial integrity, audience focus 

and in-depth coverage has been | 
recognized by this auspicious award. 
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THE VOICE OF IT MANAGEMENT))) 


Bally Gaming + Systems is 
seeking a Director of Research 
& Development for the MindPlay 
product group in its Las Vegas. 
NV office. The Director will man- 
age and develop all aspects of 
software development for Bally's 
advanced table games manage- 
ment technology group. This 
group utilizes an artificial intelli- 
gence hardware/software sys- 
tem that utilizes an embedded. 
high-speed image processing 
and computer vision compo- 
nents. Bally requires qualified 
applicants to be “hands-on" 
managers who will help define 
the overall architectures, specif- 
ic interfaces and functionalities 
of Bally's system. This includes 
both leading and assisting elec- 
trical, mechanical and software 
engineers in developing advanc- 
ed mathematical algorithms and 
software specifications and lan- 
guage for the optical hardware 
and computer vision software 
used in Bally's system. The 
applicant must be able to partic- 
ipate in the development of the 
system software. Qualified appli- 
cants must have a U.S. Bachel- 
or's Degree or equivalent in 
Computer Science, Engineering 
or a related field, plus seven 
years’ of progressively more 
responsible experience in in- 
depth object recognition, com- 
puter vision, algorithm develop- 
ment and imaging hardware 
design for dynamic environ- 
ments. Gaming experience 
required. For consideration 
please send your resume to: 
Bally Gaming + Systems 
ATTN: Director of 
Technology Recruiting 
6601 S. Bermuda Road 
Las Vegas, NV 89119-3606 


Information Systems Manager 
- Reqs: BS degree in Info Sys- 
tems or related field. 2-yrs exp in 
related occupation. Exp. to 
include Network & Database 
Admin, ERP Admin, Computer 
Programming (Client/Server & 
Web), IS Supervision in discrete 
mfg environmt. Proficiency & 
exp. w/ the following or similar 
s/w: Win2k Svr, Linux/Unix 
SLMail/Exchange, BackupExec 
Symantec AV, ASP, HTML 
iHTML, Frontpage, VFP, Access 
Thorough knowledge & exp. in 
ERP modules inci: Distribution 
Mfg, Fin., & integration of ERP 
modules w/ 3rd party s/w. 
Duties: Dev. IT strategies to sup- 
port co. goals; recommend req 
hiw & s/w upgrades; work w. 
dept. mgrs. to implement |.S 
apps; Coord. w/ vendors for 
acquisition of products & ser- 
vices; Implement max. network 
& Internet availability; Ensure 
max.network & data security; 
Maintain user network accts 
Assign user permissions to net- 
work resources; Setup & main- 
tain network printers & servers 
Troubleshoot, repair, & deploy 
apps on client PC's; Admin. mail 
server, network anti-virus, & 
RDBMS; Perform systems an- 
alysis & design; Develop VFP 
apps; Provide technical & func- 
tional support for existing ERP 
s/w; Dev. new ERP prog. which 
supports co. Lean Mfg; Dev. web 
apps & assist in improving exist 
ing co. website; Integrate exist- 
ing apps w/ web apps & create 
programs to synchronize web 
data w/ in-house data; other 
duties as assigned. Send 
resume to: HRD, Bullfrog Inti 
668 W 14600 S, Bluffdale, UT 
84065 


AS/400 LEAD OPERATOR 
AS/400 Specialist responsible 
for daily system operations, soft- 
ware releases, implementation 
security; admin & developing 
documentation. Train operators. 
Req Business Recovery and 
management skills. Job located 
in Miami, FL. Supervise 6 em- 
ployees; Bachelor Degree in 
Computer Sciences or equiv 
educ & exp; 2 yrs exp. in the job 
offered or 2 yrs exp. as a A/S 
400 System Operator; $44,080 
per yr; 9:00am-5:30pm; 40 hr 
wk. Send resume to Agency for 
Workforce Innovation Re: 
JOFL-2565132, P.O. Box 10869, 
Tallahassee, FL 32302 
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IT PROFESSIONALS 
Manager 


(Glen Mills, Pennsylvania and other locations through the U.S 
Coordinate, design and implement technology enabled business solu- 
tions invoiving integration of ERP/CRM applications such as Oracle and 
Siebel through Tibco. Function as an integrator between business needs 
and technology solutions, leading the architecture of the technicai solu- 
tions by creating process flows, designing documents, and developing 
and implementing test scenarios. Diagnose client/technical is: S, man- 
age projected time-lines to effectively deliver interfaces according to 
deadline. Lead team of consultants and provide them with direction and 
advice on design of documenis, building interfaces, testing and de 
ment. Serve as a mentor to the team members in technologies such as 
Oracle ERP, Siebel CRM, Tibco Adapters, Oracle PL/SQL, SQL, Java 
C++, and Integration Managers. Manage day-to-day client relationships 
at peer client level. Engage in overall project analysis by assessing pro- 
jected timetables, project expectations and available financial 

capital resources. Participate in proposal development and s 
sentations involving Enterprise Application Integration (EA!) using Tibc 
and Enterprise Resource Planning (ERP) applications such as Oracle 
ERP. 


The wage offered is $102,000 per year. The work schedule is Monday 
Friday, 9:00 am to 5:00 pm. The minimum requirements are as follows: 
Bachelor's degree or equivalent in Mechanical Engir 
Engineering + 5 years of experience in the job offered or 5 years 

rience as a Manager, Senior Consultant, Consultant 

Consultant. Employer will regard a foreign degree to be 

U.S. Bachelor's degree as determined by an accredited credent 

uation service. Related experience must include at least three years of 
Java, SQL and C++ programming languages and at least one year of EAI 
Solutions Middleware, Tibco middleware, Oracle ERP, Oracle PL/SQL 
and Siebel CRM 


Please send your resume or CV, referencing Job Order Number 
WEB460739 to the: PA Careerlink, 701 Crosby Street, Suite B, Chester. 
PA 19013-6096. EOE 


Oracle Applications Database Administrator. Provide production support 
DBA services for Global Oracle Applics, v.11.0.3 running on SUN Solaris. 
inci all ERP & CRM modules; provide production support for Oracle 9i 
D/base support for Red Hat N/work & Red Hat.com running on Red Hat 
Linux 7.2; provide DBA services for Oracle 111 upgrade, inci migrating 
11.0.3 to 111 & switching from SUN Solaris to Linux, & upgrading Oracle's 
RDBMS (Relational Database Management System) from 8.1.7 to 91 & 9i 
applics server; migrate & support Oracle Applic Servers on Apache Web 
Server; upgrade & patch current Oracle Applics using Oracle's std tool 
set; monitor & tune Oracle Applics SQL to improve performance in pro- 
duction & dvipmt envrmts; monitor & adjust growth of Oracle d/bases; pro- 
vide DBA support for Oracle Applics Dvipmt group & Red Hat N/work 
engrs; dvip, impimt & support reporting envrmt that enables Red Hat 
employees to perform data mining on Red Hat data. Req: Bach (or equiv) 
in Comp Engg or Comp Sci; 3 yrs in job offd or 3 yrs as S/ware 
Engr/Oracle Applics DBA; |) Min. 3 yrs of 1) Oracle Applics DBA exp on 
SUN Soiaris or Sequent Dynix systms, incl installation & impimtn of ERP 
& CRM modules, d/bases & servers; 2) Oracle Applics Patching; 3) Exp 
creating & tuning SQL & PL/SQL scripts; 4) Exp in d/base backup & recov 
ery procedures, d/base creation, & DBA maintenance tasks w/Oracle 
Applics; 5) Exp w/Oracle Applics advanced performance & applics tuning 
& Unix shell scripting; I!) Min. 2 yrs of exp performing upgrades & migra- 
tions of Oracle Applics systms from 9.4.2. to 111 & Oracle Applics d/base 
upgrades from 7.x to current release; lil) At least 1 yr practical exp 
w/HTML & JSP. Also reqd: Willingness & ability to provide 24/7 on-call 
support, telephonically & in-person, in-house & at client sites, on alternate 
wks. Hrs: 40+; Salary: $ 85K/yr. Interested applicants apply at nearest 
Employment Security Commission office or send resume to Employment 
Security Commission, 3351 Carl Sandburg Ct, Raleigh, NC 27610. All 
resumes & applications must incl SS# & refer to JO# NC7251711 & DOT 
code 039.162-010. 


SYSTEMS ENGINEER (Tampa 
FL) - Resolve systems design & 
implementation problems for 
international clientele in accor- 
dance with company standards 
& practices. Initiate & provide 
conceptual solutions to satisfy 
new &/or changing business 
rqments. Provide technical eval- 
uations of hardware, software & 
tools & procedures utilizing 
COBOL, Easytrieve, JCL & DB2 
Determine the impact on pro- 
posed changes on system archi- 
tecture & provide technical solu- 
tions to meet documented 
requirements within schedule 
Identify, recommend & docu- 
ment effective design method- 
ologies & tools to be utilized dur- 
ing the design, coding, testing 
implementation & installation 
phases. Monitor system perfor- 
mance to identify areas that 
need improvement. Position 
requires a Bachelor's Degree in 
Bus. Admin or Comp. Info 
System, oral & written fluency in 
Spanish & Portuguese & 2 yrs of 
exp in the job offered or as an 
Engineer, Programmer or An- 
alyst. 2 yrs of exp must include 
exp with data processing using 
COBOL, Easytrieve, JCL & DB2 
M-F, 9-5, 40 hrs/wk. $71,500/yr. 
Submit resume to Agency for’ 
Workforce Innovation, PO Box 
10869, Tallahassee, FL 32302- 
0869, Job Order FL-2563128 


Senior Programmer Analyst - At 
Quest Diagnostics, Inc, we've 
become the nation’s most re 
spected name in diagnostic test- 
ing by focusing on integrity, in- 
novation and quality. We've 
ated an environment where de 
icated professionals can learn 
grow and advance - ail in an 
atmosphere of pride. We're cur. 
rently seeking a Senior Pro- 
grammer Analyst to be based in 
Lyndhurst, NJ. Candidate will 
perform overall design & archi- 
tecture for IDAA computer sys- 
tem for order entry & processing 
of clinical lab tests. Code, de- 
sign, test, document & maintain 
IDAA (Oracle/UNIX). Utilize iLog 
tules and CHARVA to program 
JAVA nClasses for user inter- 
faces. Reqt's: Bachelor's degree 
in Comp. Sci., Electronics, or 
related field, and 5 yrs exp. in 
Software Development. Exp 
must include 5 yrs exp with 
JAVA, UNIX, Oracle and n-tier 
architecture of business info 
processing systems, and exp 
with CHARVA and iLog Rules 
EOE/M/F/D/V. Please add 
source code: 41625 and forward 
your resume to Email 
Charlene.R.Troncelliti@quest 
diagnostics.com or Fax: 610- 
650-2056. 





Daler baeles as 


The World Of 
Work Is Changing 
Every Week. 


LUCKILY, WE ARE Too! 


itcareers.com is now 


powered by 
CareerJournal.com! 


Search for jobs and post 
your resume here on 
www.itcareers.com 


or call:(800) 762-2977 


Computerworld - InfoWorld - Network World - October 18, 2004 





System Analyst. Two positions 
open. Oversee computer system 
reqs at company that compiles 
int'l trade data into proprietary 
s/w-based systems to conduct 
data analyses. Monitor WAN/ 
LAN for bandwidth usage, traffic 
pattern, & security loop-hole 
Perform security patch, s/w 
upgrade, backup, & user sup- 
port. Maintain CISCO Routers, 
Switches, PIX Firewall, Fiber! 
optical module, Gigabit network 
setup, & PowerVault/SAN stor- 
age solution. Be avail. after- 
hours in emergency. Configure 
Firewall, DNS, & VPN; set up 
iMail & Anti-Spam s/w, Norton 
Virus Scan, Windows Active 
Directory, PDC, BDC, & security. 
Assist in dev. Store Procedure & 
Triggers. Maintain multiple high 
avail. and perf. databases (con- 
sisting of int'l trade data w/diff 
currencies & trade terminology) 
Implement Microsoft SQL Secur- 
ity, linked server, log shipping, 
reporting services, & server farm 
configuration. Assist in s/w test- 
ing & client support. Preregs 
Bach. in computer sci., comput- 
er eng, or related field, PLUS 2 
yrs in job offered OR 2 yrs’ in 
computer system administration 
or database design. Post grad. 
ed. in computer sci. or computer: 
eng. may substitute up to 2 yrs' 
prereq exp. Competitive Salary. 
Job Location: Columbia, SC 
Respond to: Global Trade 
Information Services Inc.; ATTN 
R. Locklear; DOL-JK-1; 2218 
Devine St; Columbia, SC 29205 


BCCUSA, Inc - South Portland 
ME needs experienced Pro- 
grammer Analyst having a Bach- 
elors Degree with minimum two 
years of progressive work expe- 
rience in developing Sybase 
applications using Sybase/ASE 
12.5/12/11.5, T-SQL, Actuate 
and MQ Series. Should have 
experience in performance tun 
ing of Stored Procedures and 
SQL queries using Showplan & 
Statistics 1/O. Should have expe- 
rience in writing scripts using 
Unix Shell and PERL to auto- 
mize day to day manual pro- 
cess. Must have used utilities 
like BCP, DEFNCOPY, FTP. 
Prefer experience in Database 
backup and restore. Competi- 
tive salary and benefits. M-F, 40 
hours/week. Please mail your 
resume to BCC USA Inc., HR 
Department, 650 Main Street 
Suite 201, South Portland, ME - 
04106. 


Programmer for sys. analysis 
d/zn., & dev. of large enterprise 
appins. w/ d/base & internet 
tech. Use obj. oriented d/zn & 
structured sys. analysis & d/zn. 
s/w dev. & intgrn. on multiple 
CPU servers. S/W dev. wi/ 
J2EE, Java, XML, DTD, Perl, 
PHP4, C, Pro*C. Socket & Shell 
program. on UNIX. Sys. integrn. 
on Sun's 1280 servers w/ 
SAML, Weblogic, iplanet web 
servers. D/base d/zn & prog. in 
Oracle us/ng SOL & PL/SQL 
Intgrn. of Kenan's billing w/ 
ISP's op/n. supp. s/w. Intgrn of 
external a/c agg. s/w w/ online 
bnkg. s/w. BS in CS + 2 yr exp 
in job duties. Comp. salary. 
Apply: Unilinx - Code RV, 4625 
Alexander Dr., #110, Alpharetta 
GA 30022 with proof of perm. 
W/k authzn 


Fixed Income Analytics Integra- 
tion Developer, Wachovia Sec- 
urities, Charlotte. Provide tech- 
nological and analytical support 
to primary trading areas. Reqs 
MA in Math or Eng. 2 yrs exp. in 
pos. offered or as a Software 
Developer, information Technol- 
ogy Officer, or Mathematician 
The 2 yrs exp. must incl. work 
developing and integrating ana- 
lytics for capital markets trading 
1 yr. exp. must incl. work with 
Java, relational databases and 
object oriented design. M-F, 8- 
5, Send resume to Meredith 
Elberson, Wachovia Corp., 401 
South Tryon Street, 15th Floor, 
Charlotte, NC 28288-0475. No! 
phone calls 
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Software Engineer sought by D- 
T-H satellite television company 
in Littleton, CO to work in Engle- 
wood,CO & other unanticipated 
job sites in the U.S.At a senior 
level engage in full life-cycle 
software development of manu- 
facturing & financial software ap- 
plications in a client/server envi- 
ronment.The applications incor- 
porate the ORACLE relational 
database management system 
& operate using UNIX, Windows 
or DOS operating systems. An- 
alyze requirements; create de- 
signs; code, test, debug, modify 
& implement the software appli- 
cations. Create documentation 
& provide customer support as 
needed.Maintain existing appli- 
cations & systems, including up- 
grading applications. Utilize PL/ 
SQL, ShellScript & Developer 
2000 in designing & developing 
the software applications. Re- 
quires a bachelor’s degree or 
foreign equivalent in computer 
science or related field. 2 years 
experience completing full life- 
cycle software development of 
applications in a client/server 
environment which incorporates 
the ORACLE relational data- 
base management system & us- 
ing PL/SQL, ShellScript & Dev- 
eloper 2000-type tools. 8AM- 
5PM, M-F; $75,000/year. Res- 
pond by resume to: Employment 
Programs, PO Box 46547 
Denver, CO 80202 & refer to job 
order No. CO5094561 


COMPUTER GRAPHIC 
ARTIST/ILLUSTRATOR 


Design & create computer gra- 
phics; paint illustrations & hand 
sketches for web sites & market- 
ing material; design logos & 
other digital imaging / print work 
Create animated objects & char- 
acters using hand drawing & 
sketching for products & service 
presentation. Req. exp in fine 
arts, graphic design & 3D ani- 
mation to support internal mar- 
keting & Web/internet efforts 
Exp in setting printer services; 
Job located in Fort Lauderdale; 
Bachelor in Graphic Design or 
equiv educ & exp; 2 yrs exp. in 
the job offered; $21.55 per hour, 
9:00am-5:00pm; 40hr wk. Send 
resume to Agency for Workforce 
innovation, Re: JOFL- 2565636, 
P.O. Box 10869, Tallahassee, FL 
32302 


Senior Java Web Developer. 
Wachovia Corp., Charlotte, NC 
Responsible for Java dvip. on 
authentication and hosting dvip. 
team using standard dvip. life 
cycle methodology on projects. 
Regs. BA Info. Systems or Eng 
& 3 yrs exp. in position offered or 
as a Software Developer, Pro- 
grammer, or Software Eng. The 
3 yrs exp. must incl. Java dvip 
using J2SE and J2EE on Win- 
dows and UNIX piatforms, work 
with Oracle, SQL, C/C++, devel- 
oping N-tier Java appl. for appl 
servers (i.e. WebSphere, Web- 
Logic, iPlanet) and SDLC meth- 
odolog and work with cryptogra- 
phy tools. M-F, 8-5, Send res- 
ume to Randall Buck, Wachovia 
Corp., 1525 West W. T. Harris 
Bivd. Bidg. 3A1, Charlotte, NC 
28262. No phone calls. 


IT Financial Analyst needed 
to provide account mgmt, 
sales & bus dvipmt, 
resource staffing & out- 
sourcing, product dvipmt & 
mgmt of large, mission-criti- 
cal IT projects; build & man- 
age multi-million $ portfo- 
lios; conduct presentations. 
Resume to: Global Con- 
sultants, Attn: Hireme, 25 
Airport Rd, Morristown, NJ 
07960 


Computer Professionals 
(Multiple Openings) 
Software Engineer/Systems 
Analyst/Database Administra- 
tor/Network Administrator, 
Milwaukee, Wi. Must have 
bachelors degree or equiva- 
lent and experience in some 
of the following skills: C/C++, 
Java, Web Methods, Cold Fus- 
ion, Microsoft Technologies (Vis- 
ual Basic, .NET, ASP) CRM 
(Siebel, Clarify, Vantive), Middle: 
Ware Technologies (Orbix, Cor- 
ba, Tibco, Vitria) Data Ware 
Housing Tools (informatica, 
Data Stage, Abinitio, Business 
Objects, Cognos, Micro Strate- 
gy, Brio) ERP (SAP, People Soft 
Oracle Apps, Baan), Mainframe 
(Cobol, CICS, JCL, VSAM) AS- 
400, Ecommerce, Databases 
(SQL  Server/Oracle/DB2/Sy- 
base), Microsoft Windows (95/' 
98/NT/2000,Exchange), UNIX 
(Sun Solaris, HP, AIX), Linux 
and QA (Win Runner, Load Run- 
ner, Silk, Quickpro, Manual Test- 
ing). Position requirement: 
Must be willing to travel and 
lor relocate per project speci- 
fication.Mail your resumes to 
jobs@iksolutionsinc.com 

or 
Human Resource Director 
IK Solutions Inc 


1840 N. Farwell Ave, Suite # 306 
Milwaukee, Wi 53202 


Programmer Analyst. Sought by 
Englewood Colorado consuiting 
company to work in various un- 
anticipated locations throughout 
the U.S. Duties: Analyze, plan 
develop, test and document 
computer programs including 
business and database server 
applications. Evaluate user re- 
quests and software program 
requirements for new and modi- 
fied programs. Write specifica- 
tions, code, test and debug com- 
puter programs. Analyze and 
design databases within an 
application area. Use of SQL 
Server, PL/SQL, Visual Basic, 
ASP, XML, Crystal Reports, 
Oracle and Windows NT. Regs. 
Bachelor or equivalent in Com- 
puter Science, Business Admin- 
istration; Management Informa- 
tion Systems or related field 
Plus 1 year in the job offered or 
1 year in a related occupation, 
including Consultant, Application 
Developer. $55,744/year, 40/hrs 
/wk, 8:00AM-5:00PM. Respond 
by resume to WORKFORCE 
DEVELOPMENT PROGRAMS, 
PO Box 46547, Denver, CO 
80202, and refer to Job Order 
No. CO5093663 


Senior Programmer/Analyst Re- 
sponsible for design, develop- 
ment, analysis, test, implemen- 
tation and maintenance of GUI 
of FLICA (Flightline Internet 
Crew Access) for different air- 
lines under client/server, web- 
based and wireless environ- 
ments using C++, CGI Script 
Delphi, DHTML, JavaScript, 
Transact SQL stored procedure 
multiple-threaded application 
and object-oriented program- 
ming under windows 98/2000/ 
XP/NT; Requirements: A self- 
starter who is able to work inde- 
pendently with minimum super- 
vision; Bachelor Degree of 
Computer Science or a related 
field with five or more years of 
equivalent work experience 
Working Hours: 40hours/week 
Salary: $67500/year. Send res- 
ume to: Mr. Jeff Copelan at 
Flightline Data Services, Inc 
404 Line Creek Drive, Suite 4 
Peachtree City, GA 30269 


Leading software development 
company seeks software engi- 
neers. Qualified applicants must 
have Masters degree or (US 
equiv) in Computer Science 
Computer Information Systems 
or Computer Engineering, at 
least 2 years experience in posi- 
tion offered or as a Software 
Developer, Software Analyst 
Systems Analyst or Technical 
Architect and experience with 
Java, J2EE, .NET, Clarify, ERP, 
Oracle, Rational Rose and Unix 
Qualified applicants send res- 
ume and salary requirements to 
Princeton Information, Ltd., 
13200 Metcalf Ave, Ste 260, 
Overland Park, KS 66213. Attn 
JF. 
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SAP Consultant needed 
w/2 yrs exp in computer 
programs using MM, 
SD, F1, CO, CRM, BW 
modules in SAP R/3 
w/Oracle on Unix & 
Windows as the presen- 
tation server employing 
Rapid Application Dev- 
elopment (RAD) & 
Object Oriented Meth- 
odologies. Mail resumes 
to: Technisoft Inc. 1279 
Colts Lane, Yardley, 
PA19067. 


SOFTWARE CONSULTANT 


Analyze & evaluate existing or 
proposed software systems 
Dvips, implements & improves 
progs., sys. & related proce- 
dures to process data using in- 
depth knowledge of software 
dvipmnt life cycle. Encodes 
tests, debugs & installs operat- 
ing progs. & other sys. software 
utilizing ERP Package software 
(incl. MFG/PRO, SYMIX & Pro- 
gress) as well as the Progress 
4GL programming language 
Bachelor's degree (or equiv.) in 
Comp. Sci., Math, Engnrg, Bus 
or Commerce + 2 yrs exp. in 
position offered or as a Software 
Engnr, Prog. Analyst or Sys 
Analyst reqd. Exp. must incl: (a) 
ERP Package software incl 
MFG/PRO or SYMIX, (b) 
Progress Database & Progress 
4GL, (c) Oracle/RDBMS, & (d) 
UNIX Systems. High mobility 
preferred. 40 hrs/wk, OT as 
reqd, 8 am - 5 pm, $66,730/yr. 
Submit resume to: Mon Valley 
Regional CareerLink, Donora 
Industrial Park, 570 Galiffa 
Drive, Donora, PA 15033-1385. 
Refer to Job Order No. WEB 
462523 


COMPUTERS - SENIOR SYST- 
EMS ADMINISTRATOR - Finan 
cial Management firm seeks 
Senior Systems Administrator to 
manage, maintain and upgrade 
Solaris/Unix-based network's 
central backup system, including 
STK L6000 library with STK 
9940B tape drives. Duties in- 
clude installation/maintenance 
of the batch system PBS and of 
Solaris/Linux systems; central 
LDAP service; internal company 
webservice; central CUPS- 
based print service; user sup- 
port and security. Master's 
degree in Computer Science or: 
Computer Studies and 2 years 
exp. in job duties required. Will 
accept candidates with 2 years 
experience as Systems Adminis- 
trator of high speed networks in 
UNIX environment. Mail resume 
to RTC, 600 Route 25A, East 
Setauket, NY 11733, Attn: JR 


Analyst/Project 
Programmer, Lead 


The Medical College of Wiscon- 
sin is seeking an analyst/project 
programmer, lead for its Bioen- 
gineering and Biotechnology 
Centerto develop techniques for 
analysis of data from microarray 
and proteomics experiments. 
Candidates must possess a 
Master's degree in computer} 
science, computing, bioinformat- 
ics or related and have knowl- 
edge of microarray data analysis 
using Singular Value Decompo- 
sition, Statistical Modeling of Mi- 
croarray Data, and programming 
using MATLAB software. Three 
years of prior experience as a 
software engineer or computer; 
programmer is also required 
To apply send cover letter and 
resume to Medical College of 
Wisconsin, Employment Office- 
8701 Watertown 
, Milwaukee, WI 
53226, fax: 414-456-6502 


Senior Client Server Develop- 
er/Analyst. Code business log- 
ic, GUI Interfaces and database 
interfaces using database spe- 
cific languages. Design and 
develop GUls and screens (e.g 
develop screen application tem- 
plates; design windows, dia- 
logues, menus and toolbars for 
complex processes and work- 
flows). Develop and coordinate 
the testing process from smail 
application releases or complex 
software enhancements. Re- 
search and recommend prod- 
ucts and new technologies for 
the client/server environment 
Req. a Bach. Deg. Or equiv. in 
Comp. Sci., Eng., Math or a 
related field, and 2 yrs of exp. in 
the job offered, Software Appli- 
cations, Develop. and/or soft- 
ware eng. Qualified candidate 
must have at least 2 yrs exp. in 
interface screen design/develop. 
and/or client/server program- 
ming develop. Job located in 
Jacksonville, FL. $85,267/yr. 40 
hrs/wk, M-F, 9am - Spm. Send 
resumes to: Agency for Work- 
force Innovation, Ref: FL- 
2562153, P.O. Box 10869. 
Tallahassee, FL 32302 


Software Engineer: For co. spe- 
cializing in mktg & mnfg of com- 
puter software, design, code, 
implement & test complex prod- 
uct enhancements. This incl- 
udes researching new feature's 
concepts & establishing plans & 
coordinating them; analyze 
problems & suggest innovative 
solutions; design & test plans 
train & review design work of 
programmers. Reqs: Bachelors 
or equivalent w/ computer relat- 
ed coursework incl. operating 
systems, programming _lan- 
guages, computer application 
development. 3 yrs exp in job 
offered or 3 yrs of programming 
exp. Exp must incl. Software 
Configuration Mgmt, incl. devel- 
oping & supporting version con- 
trol, defect mgmt, change con- 
trol, Release Engineering, Rat- 
ional Clearcase version control 
Multisite, VOB/View mgmt. Pro- 
ficiency in PERL Scripting, 
BATCH Scripting, Triggers, 
Make, ClearMake, Omake 
UNIX Linux, Windows 
40hrs/wk. Send res. R-4, P.O 
Box 17182, Phila., PA 19105 


ImageVision.Net, Inc. seeks 
Computer Programmer in our 
Middletown, PA loc. Analysis & 
design of software-based solu- 
tions using scripting languages 
in web environ. & latest dev. lan- 
guages. Software testing & doc- 
umentation. Understand & ad- 
here to project plans. Use 
Oracle and System Develop- 
ment Lifecycle process & tools 
including NT based web tech- 
nologies, |E 5.0 and Netscape 
4.72 browsers, HTML, DHTML, 
VB Script, Java applet, CGI/BIN, 
ASP and XML. Must have Bach- 
elor in Comp. Science, Bus 
information Systems, or related 
+ 6 months relevant experience 
Resume to Carolyn Smith 
ImageVision.Net, Inc., Twelve 
Oaks Center, 1801 Oberlin 
Road, Middletown, PA 17057 


Software Engineer !II. Develop, 
operate, maintain distributed 
software systems; lead team of 
programmers developing soft- 
ware projects; utilize MS SQL to 
program & manage database 
applications; perform software 
costing; use 3D programming to 
build web applications. Require- 
ments: Masters in Comp. Sci. or 
related field PLUS 3 yrs. exp.* in 
job or as Software Engineer/ 
Programmer incl. 2 yrs. using 
MS SQL & 3D programming. *In 
lieu of Masters & 3 yrs. exp., will 
accept Bach. in Comp. Sci or 
related field plus 5 yrs. exp. in 
job or as Software Engineer/ 
Programmer incl. 2 yrs. using 
MS SQL & 3D programming 
Send CV to Tietronix Software’ 
Inc., attn: HR, 1331 Gemini, 
#300, Houston, TX 77058, 
fax 281-461-9350, email: 
info@tietronix.com 
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Senior SAP Computer Systems 
Analyst (National Placement) 
Must be able to analyze systems 
supporting business processes, 
design solutions using SAP R/3 
4.6C, perform configuration, tes- 
ting, develop programs using 
ABAP to meet business require- 
ments, develop interfaces using 
EDI, Docs, BAPIs, perform sys- 
tem validations. Must have mini- 
mum 5 years of strong function- 
al experience in customizing, 
implementing SAP R/3 Logistics 
- MM/W\M, IM, LIV, Procure- 
ment, AP, AR, MRP, PP and 
Batch Management. Thorough 
understanding of SD, Fl & expe- 
rience in integrating SAP R/3 
with i2 TMx suite of products is 
required. 4 yr Bachelor Degree 
in Management, Engineering, 
Computer Science, Mathemat- 
ics, MIS, CIS or Foreign Equiva- 
lent required. $100,000/yr, 40 
hrs/wk, 9a - 6p. Send resumes, 
listing Job Order # WEB461166 
to Site Manager, Beaver County 
CareerLink, 2103 Ninth Avenue, 
Beaver Falls, PA 15010-3957, 


Computer Network Engineer 
sought by computer networking 
design company in Greenwood 
Village, CO to work in 
Greenwood Village and other 
unanticipated job sites in the 
U.S. Under close supervision, 
performs moderately complex 
tasks in the design and installa- 
tion of data communication 
servers and networks running 
TCP/IP on Windows NT/2000 or 
Unix platforms. Implements net- 
work servers and hardware uti- 
lizing Active Server Pages, 
QPSK telecommunication dev- 
ices and hardware level pro- 
gramming for network chipsets. 
Requires bachelor's or foreign 
equivalent in electrical, electron- 
ics or computer engineering; 1 
yr exp performing the core 
duties and utilizing the technolo- 
gies described above. M-F 
8am-5pm; $45,000/yr. Respond 
by resume to Employment 
Programs, PO Box 46547 
Denver, CO 80202 and respond 
to JON CO5092241 


Intercall, Inc. has five openings 
for Software Engineers to lead 
teams to design, develop prod- 
ucts for the telecom industry 
using VB, Power Builder, De- 
veloper 2000, Seagate Crystal, 
Java, XML, HTML, OOP, OOD, 
Oracle, Sybase, system archi- 
tecture and programming on 
Unix, Windows NT platforms; 
analyze business processes to 
determine requirements which 
conform to overall strategic plan 
and provide operations support. 
train end users and team mem- 
bers. Require MS (or foreign 
equiv) in CS/Engineering (any 
branch)/related field & 1 yr exp 
in IT or BS (or foreign equiv) in 
one of the above fields with 3 yrs 
exp in IT. F/T. Competitive sal- 
ary. Travel involved. Resumes to 
HR, Intercall, Inc., 1211 O.G. 
Skinner Drive, West Point, GA 
31833. Please refer Job 
IClo904 


Want a new 
IT career? 


Check out our jobs 
in the combined 
CareerJournal.com 


database. 
www.itcareers.com 
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Computer Systems Analyst lil, 
Wachovia Corp., Charlotte, NC. 
Administer Argo ECS 4.0 sys- 
tem and serve as Mid-tier Type 
Architecture. Reqs. BA in Info 
Tech. and 2 yrs exp. in pos. 
offered or as a Network Tech 
Consult. The 2 yrs must incl. 
exp. networking GUI for existing 
mainframe and data in a fin 
institution (i.e. ARGO/Bankpro) 
and work designing & imple- 
menting a mid-tier architecture 
platform & troubleshooting net- 
work problems w/ Ethernet, IP 
and SNA protocals, switches, 
routers and probes.M-F, 8-5, 
Send resume to Jane Higgins 
Wachovia Corp., 401 S. Tryon 
Street, 27th Floor, Charlotte, NC 
28288-0475. No phone calls 
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Purchaser wanted by a 
components 
company in Holbrook, NY to 
purchase computer chips 
and other components for 
resale. 3 yrs related exp 
req'd and must be familiar 
with overseas’ supply 
sources. Resume only to 
CMB Components, Inc., 
630 Broadway Avenue, 
Holbrook, NY 11741; Attn 
Peter Castellama 


computer 


enterprise integration 


network vulnerabilities 


corporate data security 


government compliance 


mobile & wireless security 


business management needs 


The right IT professional 


can jump the hurdles of 


today s IT challenges. 


Call: 
(800) 762-2977 
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Programming Instructor De- 
velopment special teaching 
programs for refreshment 
courses. Borland Interbase 
MUI Development, MS Ac- 
cess, VB, Delphi, PL/SQL 
ODBC, Win2000/XP.B:S. in 
C.S. Provide User train- 
ing,database troubleshoot- 
ing, perfom buckup and 
recovery procedures. Res- 
ume A-soft Scientific, P.O 
Box 1270, Rosweil, GA 
30077 


Computers-Programmer 
/Analysts needed. Seek- 
ing qual. candidates pos- 
sessing BS or equiv 
and/or rel. work exp. Part 
of the req. relevant exp 
must include 2 yrs. work- 
ing with ClearPath |X/ 
2200, SSG & DEPCON 
Fwd. resume & ref. to 
Vennsys, LLC, Attn: HR, 
5440 Willow Rd., #117, 
Waunakee, W1 53597. 


DBAs to install, configure, main- 
tain Oracle Appis and Oracle 
Dev. software; evaluate, design 
existing/proposed Oracle db 
structures/systems; analyze da- 
tabase reqs of existing/new 
appls; monitor performance 
tune, backup/recovery strategy 
planning, and troubleshoot 
problems; maintain security of 
databases. Require BS or for- 
eign equiv. in CS or Engg (any 
branch) with 2 yrs exp in data- 
base admin. Comp. salary. Tra- 
vel involved. F/T openings in 
Elgin, iL & Lower Gwynedd, PA 
Resume to: HR, Fourth Tech- 
nologies, Inc., 585 Toligate 
Road, Suite 1, Elgin, IL 60123. 
Specify location desired, JobID 
DB964 on resume 


Hetrosys, LLC, based in Detroit 
MI seeks Applications Database 
Administrators and Sr. Prog- 
rammer Analysts for Detroit and 
nationwide opportunities. App- 
lications DBA requires bache- 
lor's in computer science, 4 yrs 
exp. as DBA and working knowl- 
edge of Kintana and Tick Mark 
Programmer Analyst positions 
require 3 yrs exp. customizing 
and extending Oracle e- 
Business suite of applications 
and working knowledge of! 
Oracle Work Flow Development 
Tool. Apply via U.S. Mail with 
resume to Hetrosys, LLC, 3757 
S. Baldwin Road, #223, Lake 
Orion, Mi 48359 


Seeking qualified applicants for 
the following positions in Mem- 
phis/Colliervilie, TN: Senior Pro- 
grammer Analyst. Formulate/ 
define functional requirements 
and documentation based on 
accepted user criteria. Require- 
ments: Bachelor's degree* or 
equivalent in computer science, 
MIS, engineering or related field 
plus 5 years of experience in 
systems/applications develop- 
ment. Experience with COBOL 
IMS and DB2 also required. 
“Master's degree in appropriate 
field will offset 2 years of gener- 
al experience. Submit resumes. 
to Jay Boane, FedEx Corporate 
Services, 40 FedEx Parkway, 
2nd Floor Horizontai, Collierville, 
TN 38017. EOE M/F/D/V. 
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Programmer/Analyst 


Leominster, MA — Plan, dev, 
test & doc comp sftwr for 
MRPII/ ERP using Win CE, 
wireless netwk, embedded 
visual studio, pocket PC, 
Borland C++, RPG, ASP, 
XML, HTML, COM, DCOM 
VB, Java, PL/SQL w/MS SQL 
Server & DB2 db’s. Bach- 
elor's degree in Comp Sci 
Min 2 yrs exp. Send resume 
to: Director of IT, Alpha Wire 
Co., 711 Lidgerwood Ave, 
Elizabeth, NJ 07207 


Web Developer needed 
w/Bachelors Degree or 
Foreign Equivalent & 2 yrs 
exp in web application 
using MTS, MSMQ, COM/ 
DCOM/COM+. C++, SQL 
Server, Crystal Reports, 
DB2 Mainframe, Visual 
StudioNET. ASP.NET, 
ADO.NET, C# & VB.NET. 
Domestic travel is req'd 
Mail Resumes to: Open 
Systems Technologies, 
Inc. 8 Winter Street, 6th 
Floor, Boston, MA 02108 


Clutchpoint delivers innovative 
IT solutions, has openings for 
experienced Prog/Systems An- 
alysts, S/W Engineers with any 
of following skills: Oracle, Sy- 
base, SQL, C/C++, Visual C++ 
OOD, Java, Web Tech, UNIX 
NT, VB, ASP, HTML, SAP, 
Peoplesoft ERP. Send resumes 
to jobs@clutchpoint.com. EOE 


Techgene Solutions has open- 
ings for Software Engineers or 
other IT staff. Candidates must 
have BS/MS with experience. 
Prefer skills in Cobol, JCL 
Oracie, SQL, VB, C/C++. Travel 
may be required for some posi- 
tions. Competitive salary. Please 
apply at dapujik@yahoo.com 
No calls. EOE. 


Technical Software Consulting 
Inc. seeks software engineers or 
system/programmer analysts or 
DBA to develop system applica- 
tions for clients. Minimum re- 
quirement is BS/MS with IT 
experience. Competitive wage 
with full benefits, sponsor H-1/ 
green card. Send resumes to 
hr@tsc-inc.com. EOE 


Multiple openings for IT profes- 
sionals by Z3 Technologies to 
design and customize applica- 
tions. Travel may be required 
Candidates must have BS/MS 
with exp. Following skills prefer- 
red: Oracle, Sybase, SQL, 
C/C++, Visual C++, OOD, Java 
Web Tech. Please contact 
info@z3technologies.com. EOE 


Software Engineer sought by 
comp services Ca specializing in 
Magic Software to dvip, impimt, 
test, document & support cus- 
tomers. As Co. is supporting 
other Magic dviprs, Enhanced 
Magic knowl is necessary. Must 
have Bach & 5 yrs exp w/Magic 
prgmg inci version 9.4. Must 
have exp w/HTML, Java Script, 
MS-SQL, Oracle, Web-services. 
Resume to Ronen Canetti 
Owner, WizMagic, LLC 4024 
Radford Ave., Bidg 2, Rm 201 
Studio City, CA 91604 


Programmer Analysts to design 
develop, test, implement appis 
using Siebel tools, C, C++, Java. 
ASP, Oracle, JavaScript, VB- 
Script, HTML, JDK, JDBC, Visu- 
al Basic, etc using UNIX and 
Windows OS; develop, enhance 
components of new/existing 
appis and databases; perform 
reqs gathering, analysis. plan 
ning, testing, implementation & 
troubleshooting. Require: BS or 
foreign equiv in CS or Engg(any 
branch) with 2 yr exp in IT. High 
salary. F/T position. Travel 
involved. Resume to HR, Smart- 
soft International, Inc., 3965 
Johns Creek Court, Ste 500. 
Suwanee, GA 30024 


Software Engineer w/bach or 
foreign equivalent in Comp. 
Sci or Engg. or Math + 1 yr 
exp in Java, Serviets, JSP, 
EJB, XML, JavaScript, ASP, 
Visual! Basic, SQL Server 
database, create data ware- 
house and client server 
applic. using Oracle, PL/SQL 
as ETL & Business Objects as 
OLAP Reporting Tool. Mail 
res: eBusinesscorp inc. 209 
West Central Street, Suite 
106, Natick, MA 01760 


Software Engineers - 
Sybor Technologies Inc 
seeks qualified Software 
Engineers. Bachelors de- 
gree required with experi- 
ence in developing and 
implementing programs 
using SYBASE ECMAP 
and SYBASE Adaptive 
Server Enterprise. Reply 
by mail to: 3506 Highway 
6 South, #249, Sugar 
Land, TX 77477 


System Analyst. Perform comp- 
uter system analysis & program- 
ming to meet client's business 
requirements; design & implem- 
ent computer data networks in- 
cluding install & configure net- 
work equipment; work on Spect- 
rum Element Manager Network 
Management System; use BP- 
CS 6.2, AS/400, RPG/400, RP- 
GLE & AS/SET, OS/400, Win NT 
4.0, VAX/VMS 5.2 & variants of 
UNIX. Req: Bachelor or equiva- 
lent (accept 3-yr college+PG 
diploma as equiv), 6-month exp 
as Programmer/Analyst or IT 
Consultant. 40hrs/wk, 8-5pm 
$48k/yr. Send resume to: Emp- 
loyment Security, 32 S. Main St 
Concord, NH 03301-4857, Re 
2004-469. Employer paid ad 


Jr. Programmer Analyst. Dvip 
create, & modify computer app. 
s/w incl. Oracle databases & 
new versions of the Oracle 
RDBMS. Design security for all 
of the Oracle Databases 
Coordinate database dvipmt 
create & design logical & physi- 
cal models for the OLTP & OLAP 
appl. using tools inci. Erwin 
Oracle Designer. Assist in 
designing the Datamarts & 
Datawarehouses using Kimballs 
& Inmons methodologies. Req 
BS in Engineering plus 2 yrs. 
exp. Sal: Open. 40hrs/wk 
Job/Interview Site: Des Moines, 
1A. Send resume to Chuck 
Gutta, Emprise Consulting LLC 
@ 200 E Sandpointe Ave, Suite 
725, Santa Ana , CA 92707 
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Programmer Analyst (Multiple 
Positions) needed w/2 yrs exp to 
design, develop, deploy & man- 
age applications, design backup 
& fault tolerant solutions using 
Designer, Visio, OEM, Rational 
Rose, PVCS, TOAD, SQL 
PL/SQL, Shell programming 
with Oracle & SQL Server as 
RDBMS on Windows & Unix 
Mail res to Empower 
Technology Solutions inc., 120 
Quarry Dr., 2nd Fir, Milford, MA 
01757 


Software Engineer needed 
w/MS in Comp. Sci. or Engg 
or Math & 1 yr exp in s/w 
applications using VB on 
Windows. Customizing Test 
Director using C++, Jasmine 
ii, Uni-Center TNG, HL7 & 
DICOM, WinRunner, SMS & 
mathematical modeling using 
MatLab, Maple & S-Plus. Exp 
prior to MS degree accept- 
abie. Mail Resumes to 
EBusinesscorp Inc, 209 West 
Central Street, Suite 106 
Natick, MA 01760 


Netrion Corp. seeks multiple 
Systems Analysts to dsgn, dvip 
customize, impimt, & support 
Peoplesoft applics for clients 
Eval client's business process 
needs, dvip specs & setup 
Peoplesoft HRMS applic mod. 
ules. Conduct data conversion 
testing, dsgn, documentation & 
perform related duties. Travel 
reqd. Associates deg in sci or 
engg related study is reqd w/2 
yrs related exp. Send resume to 
Netrion Corp., 380 S Schmale 
Rd, Ste 202, Carol Stream, IL 
60188 


Software Engineer 
(Applications) utiliz- 
ing CAD/CAM in San 
Jose @ $81k/yr. 
Travel w/in US req. 
40% of the time. Mail 
to Micronic Laser 
Systems, Inc, 1922 
Zanker Rd., San 
Jose, CA 95112 or 
fax (408) 392-2261. 


Computer Programmer 
Wanted 


To code, test, and document 
computer programs using 
JAVA, JSP, Java script, Py- 
thon, SQL, FreeBSD, Soiaris 
Windows 2000 server on MS 
SQL Server 2000 and MySQL 
databases. Req. BS or foreign 
equiv. in CS, Engineering, or a 
related field and proficiency in 
Java, JSP, MySQL, FreeBSD 
and Solaris. 40hrs/wk. Fax 
resume to HR, Experclick, Inc 
at 805-456-0166. Ref. Code 
CA-JL. 





Systems Integrator II: Deliver 
complex interactive Voice 
Response software applications: 
for customers purchasing com- 
pany network products. Assist 
account teams in understanding 
customer needs, assist w/solu- 
tion design, document proposed 
solution in statement of work, 
develop acceptance criteria, 
project plan & time estimate. 
interview customer's end users 
to gather detailed requirements, 
produce & gain customer accep- 
tance of functional specifications 
document & design, develop 
integrate, test, install & place 
solution in production at cus- 
tomer's location. Support cus- 
tomer throughout acceptance 
period as well as train them on 
solution administration. Provide 
knowledge transfer of solution 
architecture & administration & 
problem diagnosis & resolution 
Work & support company man- 
agement, product specialists, 
projects managers & fellow 
associates. M-F 40h/w. $79,600/ 
yr. B.S. in CS or Engineering + 5 
yrs exp in job offered or 5 yrs 
exp as Software Eng. Exp must 
include 2 yrs exp in Interactive 
Voice Response Systems, 
strong development & system 
administration skills in various 
Unix platforms. Must possess 
knowledge & understanding of 
call center technical environ- 
ment, computer telephony inter- 
face technologies, Text-To- 
Speech, Speech Recognition, 
PBX & Adjuncts. Please forward 
resumes to: Agency for 
Workforce Innovation, P.O. Box 
10869, Tallahassee, FL 32302 
Pls. reference: JOFL#: 2565435 


Millennium Software, Inc. has 
opportunities: Programmers, Sy- 
stems Analysts, Software Engin- 
eers, Consultants, DBAs, Archi- 
tects and Project Managers with 
4 or more skills in following envi- 
ronments: Java, J2EE, COM/ 
DCOM, EJB, Shell Scripts, SAS, 
PLC, Textra, XML, SQL, mq- 
PCX, PowerBuilder, Rational 
Rose, Relational Databases, 
Perl, SAP, Primavera Team Play 
/ P3e, Teradata, MQ-Series, 
IMS, Adabase, Natural, Web- 
sphere, Oracle Workflow, Filenet 
eprocess, Floware Workflow 
engine, C/C++, HTML, Visual- 
Basic, COBOL, DCEDFS, Auto- 
CAD, Six-Sigma, ASP.net, Mer- 
cury Test Tools, SMS, TCP/IP, 
Veritas, Tivoli. B. S. or M.S. de- 
gree & 1-2 yrs exp reqd. depen- 
ding on position We also accept 
the foreign edu. equiv. Or any 
suitable combination of edu, 
training or exp. Frequent travel 
and relocation. Send confiden- 
tial résumé and salary require- 
ments to: 2000 Town Center, Ste 
300, Southfield, Mi 48075. Visit 
our website at 
www.webmsi.com. 


PROGRAMMERIANALYST to 
analyze, design, develop, test, 
enhance and maintain web- 
based and client/server applica- 
tion software for the insurance 
industry using Java, C/C++, 
Java Script, Oracle, JDBC, 
J2EE, JSP, Serviets, EJB, XML, 
Struts, UML, SSL, Tomcat Ser- 
ver and TCP/IP under Windows 
98/2000/NT/XP, DOS and UNIX/ 
Linux operating systems. Re- 
quire: B.S. degree in Computer 
Science, an Engineering disci- 
pline, or a closely related field 
with 2 yrs of exp in the job 
offered; A M.S. with a demon- 
strated ability to perform the 
stated duties gained through 
academic coursework/previous 
work experience will be accept- 
ed in lieu of the B.S. and 2 yrs of 
exp. Competitive salary offered. 
Send resume to: Infinity Prop- 
erty & Casualty Corp., P.O. Box 
444, Birmingham, AL 35209; 
Fax at 205-803-8406; or E-mail 
at Jobs@ipacc.com; Attn: Job: 
ZD 
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Infinite Computing Systems a 
Cedar Rapids, lowa Company is 
seeking qualified computer pro- 
fessionals. Current positions 
available must meet the follow- 
ing requirements. All positions 
require at least a Bachelors 
degree (3 year fgn Bachelor 
degrees are acceptable). We 
may have additional positions 
available in addition to the ones: 
listed. Multiple positions are like- 
'y available in some positions 
Candidate's salary offered rela- 
tive to experience and skills 
Candidates must be willing to 
relocate and travel as needed 


A variety of positions are avail- 
able, which require between 1-5 
years of experience in the 
below-listed skills. Certain posi- 
tions may require a Masters 
degree. 


+ Java, HTML, XML, Weblogic 
or Websphere 

* Expeditor, Cobol, DB2, JCL, 
IDMS or IMS 

* ERP (e.g. SAP, Peoplesoft or 
Oracle Apps) 

+ Visual Basic, SQL, ASP.net, 
SQL Server 

+ Easytreive, QMF, Cobol, 
CICS, SAS, TSO/ISPF 

*C, C++, GUI, Oracle or 
Informix or Sybase 


Please send resume and cover 
letter to: Raj Inani, President, 
infinite Computing Systems, 
Inc., 230 2nd Street - Ste 214 
Cedar Rapids, IA 52401 


SYSTEMS ENGINEER Ill 


- (Temple Terrace, 
FL) - Provide conceptual & tech- 
nical solutions to complex busi- 
ness or technical problems. 
Develop & implement standards 
& verify results. Provide techni- 
cal expertise in operating sys- 
tems & applications systems in 
the telecommunications indus- 
try. Design & develop business 
process automation systems for 
the telecommunications industry 
on client-server architecture 
Provide technical solutions to 
meet documented requirements 
within schedule. identify, rec- 
ormmend & document effective 
design, coding, testing imple- 
mentation & installation phases. 
Utilize Rational Apex tools, 
PL/SQL, Oracle, Kenan Arbor 
BP & Unix. Position requires a 
Bachelor's degree, or the equiv., 
in Computer Sci, Info. Tech, or 
Eng (any) & 5 yrs of exp. in the 
position offered or as an Engin- 
eer, Programmer or Analyst. The 
5 yrs of progressive exp. must 
include some experience using 
Rational Apex tools, PL/SQL, 
Oracle, Kenan Arbor BP & Unix 
As equivalent to a Bachelor's 
degree, the employer will accept’ 
a degree or combination of edu- 
cation, training & experience 
that has been determined by a 
credential service to be equiva- 
lent to a U.S. Bachelor's degree 
from an accredited U.S. institu- 
tion of higher learning 
wk, 9 -5, M-F, $71,400/yr. 
mit resume to Workforce Pro- 
gram Support, PO Box 10869, 
Tallahassee, FL 32302-0869 
Job Order FL-2562442 


PROGR ANALYSTS/DESIGN 
ENGINEERS: des, dev bus & 
engg RDBMS based & 
PLM/PDM appins such as 
Metaphase,Windchill, etc. BE 
or ME in CE, Mech, EE or rel 
w/1-5 yrs exp in skills such as' 
Oracle, SQL.Pro*C, PL/SQL. 
C, C++, Java, VB, Unix, XML, 
UML tools, IDE, CAD/CAM 
Multiple positions in Detroit & 
other sites. Mail res to HR, 
33533 West 12 Mile Rd, 
#131,Farmington Hills, Ml 
48331 


Software engineer to design, de- 
velop and test computer pro- 
grams for business applications; 
analyze software requirements 
to determine feasibility of des- 
ign; direct software system test- 
ing procedures using expertise 
in Visual Basic, Oracle, C and 
C++. Requirements: Bachelor's 
Degree, educational or function- 
al (3 years experience=1 year of 
college) equivalent, in Engineer- 
ing, Computer Science or relat- 
ed field and two years experi- 
ence as a software engineer or 
computer programmer, knowl- 
edge of Visual Basic, Oracle, C 
and C++. Salary: $70,242/year. 
Working Conditions: 8:00 A.M 
to 5:00 P.M., 40 hours/week, in- 
volves extensive travel and fre- 
quent relocation. Apply: Arm- 
strong County CareerLink, Attn: 
CL Program Supervisor, 1270 
North Water Street, PO Box 759, 
Kittanning, PA 16201, Job No 
WEB462126 


INFORMATION TECHNOLOGY 
Member Technical Staff, Soft- 
ware. Req. Bachelor's degree 
(or equiv. foreign edu.) in Comp. 
Science or Eng. and 4 yrs. of 
experience in the job offered or 
4 yrs. of experience in systems 
software engineering, including 
device driver development and 
crash dump analysis. 2 yrs. of 
Stated experience must include 
performing Fibre Channel analy- 
sis, troubleshooting of storage 
solutions, and utilizing shell 
scripts, C, SCSI and SAN 
Perform systems software engi- 
neering, including device driver 
development and crash dump 
analysis. Send resumes to: M 
Thorpe, Job Reference #00222, 
Network Appliance, Inc.,375 
Totten Pond Road, 3rd Floor, 
Waltham, MA 02451-2010 


Luceo, Inc. seeks Programmer} 
based out of our Naperville, IL 
loc. Code, test, implement, 
maintain SAP R/3 + BW pro- 
grams. Use Bus. Perf. Mgmt, 
Bus. Modeling, Metadata Mgmt, 
Data extraction, transformation, 
loading, Query Design, Report- 
ing, Web App. Design, BW Perf! 
Mgmt & BW Admin, SAP BW 
Integration, SAP BW data loads, 
SAP BW system landscape & 
object transport proc, SAP Bus. 
Explorer (BEx), SAP BW in 
Oracle environ. Some travel 
required. Must have Bachelor 
Engineering or related + 2 yrs 
relevant exp. Resume to Luceo, 
Inc., 1431 Kallien Avenue, Nap- 
erville, IL 60540. 


PROGRAMMER ANALYSTS 
needed. Analysis, program & 
evaluate web based applications 
using Java, Java Development 
tools & Active Server Pages 
(ASP). Bachelors required in 
Math, Computers, Engineering 
or any other related field of 
study, plus two years of experi- 
ence in the job duties described 
above. Various unanticipated 
work locations throughout U.S 
Assignments generally 4-10 
months duration Salary 
$65,000.00/yr. for a 40 hour 
work week. Submit to PA 
Careerlink, 1260 New Rodgers 
Road, Bristol, PA 19007. Refer’ 
to Job Order #WEB-461364 


PROGRAMMER/ANALYST 


Programmer/analyst needed 
with experience in software 
analysis, gather requirements, 
design, develop and test the 
software applications. Experi- 
ence in COM, MTS, ODBC, 
SAP, ABAP, WML, Oracle, SQL 
server, J2EE, JSP, EJB, COMTI, 
ERP system integration and 
internet technologies is required 
$55,000/year. Bachelor's degree 
or equivalent in engineering/ 
computer science and two years 
of experience. Mail resumes to: 
infoweb Systems, Inc, 3435 
Asbury Road, Suite 175, 
Dubuque, !A 52002, #563-556- 
7990 (fax). 
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Computer Programmer. Job lo- 
cation: Cary, NC. Duties: Des- 
ign & develop core modules for 
WebSphere Commerce-Tele- 
sales Framework utilizing ext 
prog. & architectural exp. De- 
velop performance metrics for 
accelerated throughput, run- 
time deployment software build 
& pkg. implementations using 
Core Java. Propose & imple- 
ment adv. Object Oriented 
archs. for WebSphere Com- 
merce-Telesales product using 
Java. Design & implement de- 
sign patterns & deploy tech- 
nique for code rescue using 
C++ & Java. Requires: B.S. (or! 
foreign equiv.) in Comp. Sci., 
Eng. or a related field. Must be 
certified programmer in Java 
Mail res-ume (no calls) to 
Dawn Borden, CTG, Inc., 6501 


pea ete 


itcareers.com 
can solve the 
labyrinth of job 
hunting by 
matching the 
right IT skills 
with the right 
IT position. 


Find out more 


Computerworld - October 18, 2004 


advertiser tools 


MICE Teen 
is the place where 
your fellow readers 
are getting a jump 

on even more of the 


world’s best jobs. 


Now combined with 
CareerJournal.com, 
you have more jobs 


to choose from. 


Stop in for a visit 


and 


see for yourself at: 


www.itcareers.com 


CW101804N.4 





www.computerworld.com 


COMPUTERWORLD 
HEADQUARTERS 


One Speen Street, P.0. Box 9171 
Framingham, MA 01701-9171 
Phone: (508) 879-0700 
Fax: (508) 875-4394 


PUBLISHER/CEO 
Bob Carrigan 


(508) 820-8100 


EXCUTIVE ASSISTANT TO THE CEO 
Nelva Riley 
(508) 820-8105 


VICE PRESIDENT/ 
GENERAL MANAGER ONLINE 
Martha Connors 
(508) 620-7700 


EXECUTIVE VICE PRESIDENT/ 
STRATEGIC PROGRAMS 
Ronald L. Milton 
(508) 820-8661 


EXECUTIVE VICE PRESIDENT/COO 
Matthew C. Smith 


(508) 820-8102 


VICE PRESIDENT/ 
NATIONAL ASSOCIATE PUBLISHER 
Matthew J. Sweeney 


(508) 271-7100 


VICE PRESIDENT/ 
EDITOR IN CHIEF 


Don Tennant 
(508) 620-7714 


VICE PRESIDENT/CIRCULATION 
Debbie Winders 


(508) 820-8193 


CIRCULATION 
Circulation Coordinator/Diana Turco, (508) 820-8167 


PRODUCTION 
Vice President Production/Carolyn Medeiros; Production Manager/Kim 
Pennett; PRINT DISPLAY ADVERTISING: (508) 820-8232, Fax 
(508) 879-0446; DISTRIBUTION: Director of Distribution and 
Postal Affairs/Bob Wescott 


MARKETING 
Director of Marketing/Matt Duffy, (508) 820-8145 


STRATEGIC PROGRAMS AND EVENTS 
Vice President Strategic Initiatives/Leo Leger; Vice President Business 
Development/John Amato; Director, Event Sponsorship Sales/Ann 
Harris; Director, Event Marketing and Conference Programs/Derek 
Hulitzky; Group Manager, Event Operations/Michael Meleedy; Market 
ing Manager/Kate Carroll; Marketing Program Coordinator/Chris Leger. 
Operations Manager/Lynn Mason; Conference Manager/Nanette Ju: 
rgelewicz; Customer Service Specialist/Pam Malingowski, One Speen 
Street, Box 9171, Framingham, MA 01701-9171, (508) 879-0700. Fax 
(508) 626-8524 


ONLINE ADVERTISING 
National Director of Online Sales/Operations, Gregg Pinsky, (508) 
271-8013; Online Sales Manager/Sean Weglage, (415) 978-3314, Fax 
(415) 543-8010; Online Account Executive/David Guarnieri, (415) 
978-3309, Fax: (415) 543-8010 :Online Sales Assistant/Kathy Snow 
(508) 270-7112: One Speen Street, Box 9171, Framingham, MA 01701 
9171, Fax: (508) 270-3882 


IT CAREERS ADVERTISING SALES OFFICES 

Vice President, Recruitment Advertising/Nancy Percival, (800) 762. 
2977, Fax (508) 879-0184, Sales & Marketing Associate/Deborah J. 
Green, (508) 620-7757, Fax (508) 879-0184, One Speen Street, Fram 
ingham, MA 01701; EAST: Regional Manager/Jay Savell, (610) 758: 

9755, Fax (610) 419-2134; Account Executive/ Danielle Tetreault 
(508) 620-7759; CENTRAL: Regional Manager/Laura Wilkinson. 
(847) 441-8877; Account Executive/Mark Dawson, (508) 620-7760. 
WEST: Regional Manager/Caroline Garcia (408) 941-0562: Account 

Executive/Mark Dawson, (508) 620-7760 


LIST RENTAL 
POSTAL: Rich Green, (508) 370-0832, e-mail: rgreen @idglist.com 
E-MAIL: Christine Cahill, (508) 370-0808 
e-mail: ccahill@idglist.com. MAILING ADDRESS: |DG List Services. 
P.0. Box 9151, Framingham, MA 01701-9151, Fax: (508) 370-0020 


AD INDEX 


COMPUTERWORLD SALES OFFICES 


VICE PRESIDENT/NATIONAL ASSOCIATE PUBLISHER 
Matthew J. Sweeney 
(508) 271-7100 
Fax: (508) 270-3882 
SALES BUSINESS MANAGER 
Laureen Austermann 
(508) 820-8522 
Fax: (508) 270-3882 


Ds) 
ACCOUNT DIRECTOR: Jim Barrett (415) 978-3306; 
ACCOUNT EXECUTIVE: SaraJane Robinson-Retondo 
(415) 978-3304, 501 Second Street, Suite 114, San Fran- 
cisco, CA 94107, Fax: (415) 543-8010 


ACCOUNT DIRECTOR: Jim Barrett (415) 978-3306, 
ACCOUNT EXECUTIVES: Emmie Hung (415) 978- 
3308, SaraJane Robinson-Retondo (415) 978-3304, 501 
Second Street, Suite 114, San Francisco, CA 94107, Fax 
(415) 543-8010 


Sa eis) 


ACCOUNT DIRECTOR: Bill Hanck (949) 442-4006; 
ACCOUNT EXECUTIVE: Jean Dellarobba (949) 442- 
4053, 19200 Von Karman Avenue, Suite 360, Irvine, CA 
92612, Fax: (949) 476-8724 


ACCOUNT DIRECTOR: Peter Mayer (201) 634-2324 
ACCOUNT EXECUTIVE: John Radzniak (201) 634- 
2323, 650 From Road - 2nd Floor, Paramus, NJ 07652, 
Fax: (201) 634-9289 


COMPUTERWORLD is a business unit of IDG, the 
world's leading technology media, research and event 


IDG 


aes 

ACCOUNT DIRECTOR: Bill Hanck (949) 442-4006 
ACCOUNT EXECUTIVE: Jean Dellarobba (949) 442- 
4053, 19200 Von Karman Avenue, Suite 360, Irvine, CA 
92612, Fax: (949) 476-8724 


ACCOUNT DIRECTOR: Laurie Marinone (508) 271- 
7108; ACCOUNT EXECUTIVE: Deborah Crimmings 
(508) 271-7110, One Speen Street, Framingham, MA 01701, 
Fax: (508) 270-3882 


ACCOUNT DIRECTOR: Peter Mayer (201) 634-2324 
ACCOUNT EXECUTIVE: John Radzniak (201) 634- 
2323, 650 From Road - 2nd Floor, Paramus, NJ 07652 
Fax: (201) 634-9289 


ACCOUNT DIRECTOR: Lisa Ladle-Wallace (904) 284- 
4972, 5242 River Park Villas Dr., St. Augustine, FL 32092, 
Fax: (800) 779-8622; ACCOUNT EXECUTIVE: Deborah 
Crimmings (508) 271-7110, One Speen Street, Framingham, 
MA 01701, (508) 879-0700, Fax: (508) 270-3882 


COMPUTERWORLD October 18, 2004 93 


ADVERTISER'S INDEX 


Advanced Micro Devices 
www.amd.com 


American Power Conversion 
Www.apcc.com 
888-289-APCC 


Best Practices in Storage 
www.snwusa.com 


www.gobroadcom.com 


Computer Associates . . 


www.ca.com 
www.emec.com 


www. finisar.com 


Fuji Storage 
www. fujifiim.com 


Hewlett-Packard Server 


www.hp.com 


IBM Cross Server 
www.ibm.com 


www.ibm.com 


Microsoft Linux 
microsoft.com/getthefacts 


Microsoft Manageability 
microsoft.com/wssystem 

Pink Elephant 
www.pinkelephant.com 

Polycom 
www.polycom.com 

SBC Communications 
www.sbc.com 


Software Paradigms International ....29 


www.spiportal.com 
SunGard Availability Services .. ..20/21* 


www.sungard.com 


Webroot Software 
www, ‘oot.com 
Xerox Corporation 


1-800-ASK XEROX, ext. LEARN 
xerox.com/learn 


*Regional Select Edition 


This index is provided as an additional 
service. does not assume 
any liability errors of omissions. 


Have a problem with your Computerworld subscription? 


We want to solve it to your complete satisfaction, and we want to do it fast. 


Please write to: Com, 


label. Send this along with your correspondence. 


ADDRESS CHANGES OR OTHER CHANGES TO YOUR SUBSCRIPTION 
All address changes, title changes, etc. should be accompanied by your address label, if 
possible, or by a copy of the information that appears on the label, including the coded line. 


ee eee. eee 
ADDRESS SHOWN: Home “Business| 


YOUR NEW ADDRESS GOES HERE: 


NAME 
TITLE COMPANY 
ADDRESS 


CITY 


OTHER QUESTIONS AND PROBLEMS 


tis better to write us concerning your problem and include the magazine label. Also, address changes 
are handled more efficieritly by mail. However, should you need to reach us quickly, the following toll-free 
number is available: (888) 559-7327 Outside U.S. call (847) 559-7322. 


Internet address: cw@omeda.com 


COMPUTERWORLD allows advertisers and other companies to use its mailing list tor selected offers we feel would be 
of interest to you. We screen these offers carefully. If you do not want to remain on the promotion list please write to 
the following address - COMPUTERWORLD, Circulation Department, One Speen Street, Framingham, MA 01701. 


|, P.O. Box 3500, Northbrook, IL 60065-3500. 


Your magazine subscription label is a valuable source of information for you and us. You can help us by 
attaching your magazine label here, or copy your name, address, and coded line as it appears on your 


COMPANY 








04 COMPUTERWORLD October 18, 2004 


How to Contact 


COMPUTERWORL 


We invite readers to call or write with their comments 
and ideas. It is best to submit ideas to one of the department 
editors and the appropriate beat reporter. 


Carol Sliwa, Windows; Linux 
RFID; retail industry 


Marc L. Songini, ERP: supply chain: 
CRM; databases 


Patrick Thibodeau, enterprise systems; Unix 
outsourcing and immigration; antitrust issues 


Don Tennant, 
editor in chief 
(508) 620-7714 
Mitch Betts, 
executive editor 
(301) 262-8243 
Julia King, 
executive editor, events 
(610) 532-7599 


(508) 628-4731 
(608) 820-8182 


(202) 333-2448 


Dan Verton, legislation/regulation; homeland security. 
federal/state government IT; travel industry (703) 321-2277 
Jaikumar Vijayan, corporate security/privacy issues: 
manufacturing industry (630) 978-8390 
Todd R. Weiss, general assignment; open-source community 

intellectual property issues; messaging/collaboration (717) 394-3850 


DEPARTMENT 
EDITORS 
Craig Stedman, News editor 
Mike Bucken, assistant News editor 
Tommy Peterson, Technology editor 
Kathleen Melymuka, Management editor 


OPINIONS 


Jamie Eckle, Opinions editor 
Frank Hayes, senior news columnist 


(508) 820-8120 
(508) 820-8562 
(508) 620-7729 
(508) 820-8118 


(508) 820-8202 
(503) 252-0100 


FEATURES 


Ellen Fanning, special projects editor 
Robert L. Mitchell, senior editor 

Mark Hall, editor at large 

Gary H. Anthes, national correspondent 


Julia King, national correspondent 


REPORTERS 
Matt Hambien, networking, mobile/wireless: 
network/systems management (508) 820-8567 
Heather Havenstein, business intelligence; Web services. 
application development: application server software (919) 233-7776 


Thomas Hoffman, |T management and investment 
issues; careers/| energy industry 


(508) 820-8204 
(508) 820-8177 

(503) 391-1158 
(703) 536-9233 
(610) 532-7599 
(845) 988-9630 


COMPUTERWORLD.COM 


Tom Monahan, online director 
Sharon Machlis, managing editor/online 


Lucas Mearian, storage: disaster recovery and 
business continuity; financial services industry 


(508) 820-8215 
(508) 820-8218 


(508) 820-8231 


Linda Rosencrance, general assignment 
transportation and automotive industries 





(508) 628-4734 





RESOURCES 


Ken Mingis, online news editor 
Marian Prokop, online editor ai large 


David Ramel, e-mail newsletter/online editor at large. 


John R. Brillon, associate art director 
David Waugh, associate art director 


Peter Smith, Web development manager 
Kevin Gerich, Mark Savery, Web developers 
Matthew Moring, graphics designer 


RESEARCH 


Mari Keefe, research manager 
Gussie Wilson, research associate 


COPY DESK 


Michele Lee DeFilippo, managing editor/production ...(508) 820-8126 
Bob Rawson, assistant managing editor/production 


Mike Parent, Monica Sambataro, senior copy editors 
Eugene Demaltre, copy editor 


GRAPHIC DESIGN 


Stephanie Faucher, design director 


April O’Connor, associate art director 
Julie Quinn, senior designer 
Susan Cahill, graphics coordinator 
John Klossner, cartoonist 


ADMINISTRATIVE SUPPORT 


Linda Gorgone, office manager 


CONTRIBUTING COLUMNISTS 


Pimm Fox, Michael Gartenberg, 
Dan Gillmor, Paul Glen, Barbara Gomolski, 
Thornton A. May, David Moschella, 
Bart Perkins, Paul A. Strassmann 


CONTRIBUTING WRITERS 
Mary Brandel, Russell Kay, Sami Lais, 


www.computerworld.com 


(508) 820-8545 
(508) 620-7717 
(508) 820-8269 
(508) 820-8216 
(508) 820-8142 


Sa SCM 


TELEPHONE/FAX 


Main phone number. . 879-0700 
All editors unless otherwise noted sedsaee 


24-hour news tip line. . . (506) 620-7716 
E-MAIL 


Our Web address is 
www. 


Staff members’ e-mail follows this form: 
For IDG News Service correspondents: 
firstname_lastname@idg.com. 


(508) 271-8015 LETTERS TO THE EDITOR 


Letters to the editor are welcome 
and should be sent to: 


letters@computerworld.com. 
Include your address and telephone number. 


(508) 820-8235 MAIL ADDRESS 


een eh (ere 


SUBSCRIPTIONS/BACK ISSUES 


Subscription rates: U.S., $99.99/year; Canada, 
Si3O/yea; Cental and South Amenca,$250/ea 
(608) 820-8176 others, $295/year 


Visit www.reprintbuyer.com to obtain quotes 
and order reprints online. 





Robert L. Scheier, Steve Ulfelder 





E.D. SMITH & SONS LTD. .......10 


COMPANIES IN THIS ISSUE 


Page number refers to page on which story a Company names can also be 
.computerworld. 


searched at www. 


ADVANCED FIBRE 
COMMUNICATIONS INC. .... 
AFFILIATED COMPUTER 
SERVICES INC. 

AGITAR SOFTWARE INC. 
ALACRITUS SOFTWARE 
ALCATEL 

AMERICAN INDIAN SCIENCE 


AND ENGINEERING SOCIETY . 


AMR RESEARCH INC. . 
ANITIAN CORP... . 

ARC ADVISORY GROUP INC. 
ASIANAVENUE.COM 
ASSOCIATION OF STORAGE 
NETWORKING USERS 

ATA AIRLINES INC. 

ATI TECHNOLOGIES INC 
AVINTI INC 

BANK OF AMERICA CORP... 
BEGLEY CO. 

BLACK DATA PROCESSING 
ASSOCIATION 
BLACKPLANET.COM 


BLUECROSS BLUESHIELD OF 


TENNESSEE INC. . 
BMC SOFTWARE INC 


BORLAND SOFTWARE CORP. 


BRENNAN CENTER 
FOR JUSTICE. 


SYSTEMS INC. 


-.40 


25 


-36 
.28 


32 


-18 


1 


12 


32 


37 


40,42 


28 
8 


3 


34 


31,32 
.32 


..4 


8 
5 


5 --25 
BROCADE COMMUNICATIONS 


36 





BUILDING STORAGE INC. ......40 
CACI INTERNATIONAL INC......25 
CANVAS SYSTEMS LLC. 

CERNER CORP..... vee 
CHELA EDUCATION 

FINANCING ae : 21 
CHILDREN’S MIRACLE 
NETWORK.......... . 31 
CIBER INC. ........ eer 
CISCO SYSTEMS INC. -4,6,36 
COMPUTER ASSOCIATES 
INTERNATIONAL INC -6,8,16, 
. .- 28,36,55 
CONSORTIUM FOR GRADUATE 
STUDY IN MANAGEMENT ......32 
CONTINENTAL AIRLINES INC. 6,38 
CURRENT ANALYSIS INC. .......4 
CVS CORP. 34 
DANTZ 

DEVELOPMENT CORP. 55 
DATA MOBILITY 

GROUP LLC . 
DECISIONONE CORP... . 
DECISIONSMITH ... 

DELL INC ‘i 

DELTA AIR LINES INC. 

DELTA TECHNOLOGY INC. 
DENVER HEALTH 

MEDICAL CENTER... 

DIEBOLD ELECTION 

SYSTEMS .. 


= -.9 
EDWARD JONES & CO. . -..38 
EEYE DIGITAL SECURITY INC. ..55 
ELECTION SYSTEMS AND 
SOFTWARE INC. 25 
EMC CORP. - 4.36, 38, 40, 55 
ENTERPRISE STRATEGY 
GROUP INC. ........... A 
EXABYTE CORP. 
EXECUTIVE SOFTWARE 
INTERNATIONAL INC. ..........37 
FEDERAL COMMUNICATIONS 
COMMISSION 

FEDERAL ELECTION 
COMMISSION 

FIRST INTERNET INC 

FUJI PHOTO FILM USA INC. 
GABRIEL CONSULTING 

GROUP INC. 

GARTNER INC. 

GENERAL ELECTRIC CO. .. 
GOLDEN GATE UNIVERSITY 36 
HABITAT FOR HUMANITY 
INTERNATIONAL INC............31 
HART INTERCIVIC INC. -.25 
HEALTH LANGUAGE INC. ......34 
HERMAN MILLER INC. ........1,16 
HEWLETT PACKARD CO... . 4,8,40 
HITACHI DATA 

SYSTEMS CORP. 


436,37 


--4,5,6,8,10, 

- 19,28,40,46 

5§,8,10,35,45 
INFORMATION SYSTEMS AUDIT 
AND CONTROL ASSOCIATION ...1 
INFOSYS TECHNOLOGIES LTD. ..8 


INTEGRAIL . . 

INTEL CORP. 

INTERNET SECURITY 

SYSTEMS INC...... ae 55 
IROQUOIS GAS TRANSMISSION 
SVSTEMLP .......... . 55 
IT GOVERNANCE INSTITUTE. 1 
ITPARADE.COM INC......... 40,42 
JOHNS HOPKINS 

UNIVERSITY . 

JUPITER RESEARCH 

KRYPTONITE 

LEADERSHIP CONFERENCE 

ON CIVIL RIGHTS 
LEFTHAND 
NETWORKS INC.. 
MARRIOTT 
INTERNATIONAL INC. 
MCKESSON PROVIDER 
TECHNOLOGIES 
MERCK AND CO. 

META GROUP INC. . cael 
MICROSOFT CORP. wv 4, 5,10, 
. ‘ 20,25.28,55 
MIGENTE.COM . 

NATIONAL MEDICAL HEALTH 
CARD SYSTEMS INC. ..... 
NATIONAL SOCIETY OF 

BLACK ENGINEERS 

NCR CORP. 

NEOIT INC. 

NETWORK APPLIANCE INC... ..38 
NORTHROP GRUMMAN CORP.. 40 
NOVELL INC. o 

OAG WORLDWIDE LTD. . 
OBIANINC............. 

OFFICE DEPOT INC. 


ONDEMAND PARTNERS LLC ... 16 TATA CONSULTANCY 


ONLINE RESOURCES CORP......1 
OPTWARE CORP...............45 
ORACLE CORP...... --10,19,38 
TCSII, on oiannncctncgias eee 
PEOPLESOFT BOCs oon sevice ss 12 
PORTLAND GENERAL 

AMER CIs 5b. deve Fes bos win 
QUALSTAR CORP. 36 
RABA TECHNOLOGIES LLC... 
RATIONAL SOFTWARE CORP... 
REGIONS FINANCIAL CORP. 
RELIABLE DRUG 

STORES INC........... 

RITE AID CORP........ 

SAGE RESEARCH INC.. 


SCIENCE APPLICATIONS 
INTERNATIONAL CORP. 
SIERRA ATLANTIC INC. 

SILICON GRAPHICS INC. 
SOCIETE BIC .. 

SOCIETY OF HISPANIC 
PROFESSIONAL 

ENGINEERS INC..... 
SOUTHWEST AIRLINES CO..... 
STARBUCKS CORP. . 

STORAGE 

TECHNOLOGY CORP... 
SUCCEED CORP. ... 
SUN 
MICROSYSTEMS INC. 
SUNGARD DATA 
SYSTEMS INC 
SYSTEMCORP ALG LTD.. 
SYSTEMEXPERTS CORP. 
SYSTEST LABS LLC 


- 10.20,36,40 


SERVICES LTD. ....... 

TEPPCO PARTNERS LP.... . > 
TERADATA CORP.... 

THE ALLSTATE CORP.......... 
THE NEW YORK TIMES CO. .... 
THE SAGEZA GROUP INC....... 
THE SCO GROUP INC... 

THE YANKEE GROUP. . 
TRUSECURE CORP. ............. 
U.S. AIR FORCE 

U.S. DEPARTMENT OF 

JUSTICE . Se 

U.S. SECURITIES AND 

EXCHANGE COMMISSION ... . 1,20 
UNITEDHEALTHCARE .........34 
UNIVERSITY OF PITTSBURGH 
MEDICAL CENTER " 
VERITAS SOFTWARE CORP. . 65 
WAL-MART STORES INC.........6 
WORLD DATA 

PRODUCTS INC. 

WYLE LABORATORIES INC... .. 25 
WYNDHAM 

INTERNATIONAL INC. ............1 
XEROX CORP. ........ -20 
XERXES COMPUTER CORP. 40 
ZEBRA TECHNOLOGIES CORP. 1 





www.computerworld.com 


NEWS 


COMPUTERWORLD October 18,2004 Jd 





Continued from page 1 
Patches 


them trickle in randomly 
throughout the day, week and 
month.” 

David Krauthamer, director 
of information systems at Ad- 
vanced Fibre Communica- 
tions Inc. in Petaluma, Calif., 
said Microsoft appears to 
have become much more 
aware of the heavy burden 
that patching systems puts on 
IT managers. He added that a 
regular patching schedule re- 
duces much of the instability 
that results from intermittent 
releases and eases the chal- 
lenge of keeping up to date 
on patches. 

“What it gives you is the 
consistency you need to factor 
patching into your overall 
[systems management] proc- 
ess,” Krauthamer said. “It’s a 
great thing if you can spend 
just one night a month doing 
patches.” 

From a systems administra- 
tion standpoint, the predict- 
ability of the monthly releases 
has made it “much easier” to 
manage the patching of Win- 
dows-based machines, said 
Mike Tindor, vice president of 
network operations at First In- 





ternet Inc., an Internet service 


| provider in St. Clairsville, Ohio. 


Debbie Fry Wilson, director 


of marketing at Microsoft’s Se- | 


curity Response Center, said 


| the shift from an ad hoc patch 


release process to a weekly 
schedule and then to the 
monthly one was driven by 
feedback from users who said 
they “were not able to plan 
well because they didn’t know 
in advance when we would 
have patches for them.” 


Deeper Testing 
The policy of releasing patch- 
es on the second Tuesday of 


each month has also given Mi- 
| crosoft more time to work on 


improving the quality of its 
fixes and to do a “deeper level 
of testing” in the patch devel- 
opment stage, Wilson said. 
Even so, users and analysts 
cited some ongoing concerns 
with the patching process. 
Microsoft’s growing habit of 
grouping together multiple se- 
curity fixes in large patches 
can increase the testing bur- 
den for IT managers, said Russ 
Cooper, an analyst at TruSe- 
cure Corp., an IT security con- 
sulting firm in Herndon, Va. 
For instance, last week’s 
crop of patches included one 
that was designed to fix eight 





Microsoft’s Fixes Seek to Stop Remote Attacks 


THE FLURRY OF FIXES Micro- 
soft released last week was 
aimed at plugging nearly two- 
dozen security holes, the most 
severe of which could allow an 
attacker to take complete control 
of an affected system and re- 
motely execute malicious code. 

Four of the newly disclosed 
vulnerabilities are particularly 
dangerous because they can be 
remotely exploited by malicious 
hackers, according to an adviso- 
ry issued by Atlanta-based Inter- 
net Security Systems Inc. 


separate vulnerabilities. “Users 


| should get used to the idea of 


being snowed under on ‘Patch 
Tuesday,” Cooper said. 

A monthly schedule can 
sometimes also expose users 
to longer periods of risk, said 
Andrew Plato, president of 


| Anitian Corp., a systems inte- 


grator and consulting firm in 
Beaverton, Ore. “If a new se- 
curity flaw is discovered right 
after an update, waiting 30 


| days for a patch is too long,” 


he said. 
Tindor said that if informa- 


| tion about a security flaw 


EMC Buys Backup Software Vendor 


BY LUCAS MEARIAN 
EMC Corp. last week agreed 
to acquire Dantz Development 
Corp. in an effort to boost 
sales to the small-business 
community as the company 
continues to expand its soft- 
ware portfolio. 

EMC officials said that Wal- 
nut Creek, Calif.-based Dantz 
will become part of the Enter- 
prise Storage Software Group. 
The deal is valued at less than 
$50 million, according to EMC. 

Observers said the acquisi- 
tion should help EMC in its 
competition with Veritas Soft- 
ware Corp.’s BackupExec soft- 





ware and Computer Associ- 


Periodical postage paid at Framin 
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rbor, Mich. 48106. Computerworld i 


ates International Inc.’s Bright- 
Stor ARCserve backup agent. 
Mark Lewis, executive vice 
president of EMC’s software 
group, said the acquisition 
should allow the company to 
boost its offerings for small to 
midsize businesses. In addi- 
tion, he said, Dantz’s backup 
software should integrate easi- 


| ly with the EMC NetWorker 


backup management software 
produced by EMC’s Legato 
division. 

Lewis said that Dantz’s Ret- 
rospect backup software will 
be sold separately, even after 
it’s integrated with Net Worker. 

Kevin Money, network 
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supervisor at Iroquois Gas 
Transmission System LP, 
whose operation has been 
using the Dantz Retrospect 
software for nine years to back 
up its workstations, servers 
and field offices, said he wants 
to know what EMC’s plans 


| 
See erecesesesseesseseessoessees | 


&* Is [EMC 
buying Dantz] 
for its infrastruc- 
ture, its patents or 
for its licensing? 


Pee eceresessssesseeseeseesesses 
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“What concerns me is that 
they are taking such a long time 
in fixing some of these bugs,” 
said Drew Copley, a senior re- 
search engineer at eEye Digital 
Security Inc., a vulnerability man- 
agement software vendor in Al- 
iso Viejo, Calif. 

For instance, one of the flaws 
disclosed last week was reported 
to Microsoft 208 days before the 
patch designed to fix it was is- 
sued, according to Copley. 

“That's a long time to expect 
that no one else is going to find 


were to become public before 
the next monthly patch re- 
| lease, he would expect Micro- 
| soft to be “proactive in push- 
ing the updates quickly rather 
| than waiting to release them at 
| the scheduled time.” 
| Stephen Toulouse, security 
| program manager at the Mi- 
crosoft Security Response 
Center, reiterated that the 
company is releasing com- 
bined fixes in response to re- 
quests from users. 
“We have heard very clearly 
from customers that when 
there is an opportunity to have 


| are for the Dantz operation. 

Shelton, Conn.-based Iro- 
quois has 123 employees and 
operates a 412-mile natural- 


| U.S.-Canada border at Wad- 
dington, N-Y., to Long Island. 

Money said his operation has 

six servers that run the Retro- 

| spect software and back up 

| about 2TB of data nightly. The 

backup application is simple 

| to manage and works across 

| Windows, Macintosh and Lin- 

| ux platforms, he said. 

Money also said he likes 

| Dantz’s licensing structure, 

which is based on the num- 

| ber of servers the software 

| is running on, not on the num- 

| ber of individual clients that 

| are being backed up. 
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gas pipeline that runs from the | 


out about it,” he said. 

Stephen Toulouse, security 
program manager at Microsoft's 
Security Response Center, said 
some patches require extensive 
testing because of the complexi- 
ty of the vulnerabilities. “One of 
the most important things is 
quality,” Cooper said 

The total number of flaws dis- 
closed last week came close to 
matching the 22 security vulner- 
abilities that Microsoft released 
fixes for last April. 

- Jaikumar Vijayan 


just one update, that’s what 
they want,” Toulouse said, 
noting that Microsoft tries to 
combine fixes for multiple 
flaws found in the same 
source-code files. 

In response to concerns 
about users being exposed to 
longer periods of risk, Wilson 
said Microsoft will issue out- 
of-cycle fixes if the situation 
warrants it. In late July, for in- 

| stance, the company rushed 
out a patch after an active ex- 
ploit was found to be taking 
advantage of a flaw in Internet 


Explorer. @ 50113 


| He expressed concern 
| about EMC’s plans for the 
| Dantz unit. “Is [EMC buying 
| Dantz] for its infrastructure, 
its patents or for its licens- 
| ing?” Money said. “The only 
| other thing I'd be questioning 
| that also always makes people 
like us nervous is just their li- 
censing [plans].” 
| According to EMC, there 
are no plans to change the 
| Dantz licensing schemes. 

The company said that 
| Dantz will continue to operate 
| out of its Walnut Creek facili- 
| ties. Current President and 
| CEO Larry Zulch will continue 
| to oversee the Dantz unit and 
| will report to Lewis and Dave 


| DeWalt, co-leaders of EMC's 


| software group. @ 50108 





COMPUTERWORLD October 18, 2004 


THE BACK PAGE 


FRANK HAYES # FRANKLY SPEAKING 


ITinaJ 
N FRANCE LAST WEEK, it became legal for movie theaters to 
use electronic jammers to block cell phone use during shows. 
In Mexico, some churches recently started doing the same 
thing during religious services, even though jammers are ille- 
gal there. Police in the U.S. use them too, especially during 
hostage standoffs. That’s a violation of federal law, but the FCC has 
never taken anyone to court over it. Prisons, the Secret Service, the 
military — the list of jammer users keeps getting longer. 
Hey, if they’re using jammers to solve their problems, why can’t 
we use them to deal with the security issues created by cell phones, 
Wi-Fi and other wireless technologies? 


It sure would make things easier for us. In- 
stead of constantly monitoring networks to 
look for Wi-Fi hubs that users have smuggled 
in, we could just shut them down with a jam- 
mer. We could block cell phones in conference 
rooms and jam camera-equipped phones in sen- 
sitive areas like research labs (and restrooms). 
Everything from surveillance bugs to Bluetooth 
devices could be shut down at once by turning 
whole office buildings into dead zones. 

Yes, we'd be rolling things back to the pre- 
wireless days. But that means we’d dump all the 
problems wireless has brought us, from net- 
work security holes to the time employees 
waste on nonbusiness cell calls. And since most 
of those wireless gizmos are personal, not is- 
sued by the company, we wouldn’t be losing of- 
ficial IT infrastructure — just shedding annoy- 
ing complications that users have dragged in. 

It’s technology applied to eliminate problems 
introduced by technology. So why shouldn’t we 
use jammers? 

Well, they are illegal. Maybe the FCC isn’t 
actively looking for violators, but if you blast 
away with a jammer in the same location long 
enough, you’ll probably get caught. 

Then there are the side effects. 
Never mind users whining about 
emergency calls they might not get; 
they got messages about emergen- 
cies before they had cell phones, 
and they can do that now, too. 

But delivery and repair people 
depend heavily on wireless tech- 
nologies these days. Your building 
security guards use radios; so do 
police and firefighters. Broad- 
spectrum jamming would cut them 
all off. Jamming would likely affect 
your neighbors, too, because there’s 
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no cheap way to limit the effects of a jamming 
signal — it won’t stay inside your office walls. 

Of course, you could limit your jamming to 
just Wi-Fi’s 2.4-GHz band and spend extra for 
smart jammers that fool cell phones into think- 
ing they’re local towers that have run out of 
bandwidth. Or you could line your office and 
conference room walls with radioproof material 
that lets you use Wi-Fi and Bluetooth locally 
while blocking would-be wireless hijackers and 
without annoying the people next door — and 
that approach is legal, too. 

Pile on enough antiwireless technology, and 
you might even be able to block just the things 
you want blocked. Wouldn’t that be great? 

No, it wouldn't. 

Maybe movie theaters and churches can roll 
back wireless. Maybe cops and the Secret Ser- 
vice have to create wireless-free zones. We 
can’t — any more than we could roll back the 
Internet or LANs or PCs when users first 
brought them in. 

Sure, wireless will give us security headaches 
for a long time. But users have forced us to deal 
with cell phones, Wi-Fi and the rest. They’ve 
forced wireless on us because it’s 
useful to them, even if it’s an on- 
going pain for us. 

We can — and should — use vig- 
ilance, education and occasional 
arm-twisting to plug security holes 
and keep users from straying too 
far from what we can handle. 

But there’s no use in wishing for 
ways to jam or block or limit wire- 
less technology. Not now, not any- 
more. Users are right — for IT, in 
many ways, the future is wireless. 

And we can’t jam the future. 


@ 50066 
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power outage 


Rain, Rain, Go Away 

When hurricane season arrives, this pilot fish in Flori- 
da isn’t worried. The disaster recovery plan is in place. 
Backups are done. The new generators are fueled. 
And when a storm hits, everything keeps running - 
except that it's pretty dark in the data center and the IT 
staff is monitoring the servers by flashlight. “Did the 
bulbs blow when the power surged back on? Or 
maybe the breaker tripped?” fish asks. “No — further 
investigation revealed that no one had bothered to 
wire the lighting into the generator.” 

Sog Story 

itstheearty = SHARK from this thun- 
1980s, and 

this companyis TANK. 
moving to a new 

data center - whichisa : 

major undertaking for: 

still keeps all its data on 

punch cards and refuses | 
tocopyittotape.“The : 
department head told us : 

he planned to move his: 

many filing cabinets | 
worth of card drawers by : 

hiring a flatbed truck,” = 

says an IT pilot fish. 
“Then the data center 

manager asked one i 
question: ‘What happens : 

if t's raining that week- 

end?’ The department 
henkeraiteabinck oe 1 

his face as his jaw start- : 

ed its trip to the floor. 

The data was moved to 

disk by the end of the — 

week.” 

You Said Bring. 


but the outpatient clinic. | coming, we call every- 

at the same site will stay : body on the campus and 
open. So after this pilot _ tell them to make a full 

fish sends two newly : backup of their data and 
hired PC techs to collect : bring it to the designated 
the therapy office’s com- : : trailer. Once everyone is 
puters, he’s alittle con- : accounted for, we put all 
cerned when the con- "the tapes in my pickup 

nection to the clinic : truck and drive north for 
drops off. Maybe it’s a } afew days.” 


DRIVE BY WITH YOUR STORY. Send me your true 

tale of IT life at sharky@computerworld.com. You 
score a snazzy Shark shirt if | use it. And check out the daily 
feed, browse the Sharkives and sign up for Shark Tank 
home delivery at computerworld.com/sharky. 








It is one of the biggest threats to your enterprise today. Spyware 

steals bandwidth, halts productivity and puts your intellectual 

property in harm’s way. Webroot Spy Sweeper Enterprise offers 

real-time protection by identifying and eradicating spyware across 

> your organization. To see the magnitude of the spyware threat, run 
Enterprise 

a free network scan at www.webroot.com/whoaboy or contact us 


at 866.254.5914 . 
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DB2 DOESN’T LOCK YOU IN. 
YET ANOTHER REASON WHY 
DB2 IS THE WORLD’S LEADING 
DATABASE PLATFORM. 


Why not move up to middieware 
that makes sense? Through the 
end of the year, you can get 

IBM DB2 Universal Database by 
taking advantage of our extremely 
compelling trade-up promotion. 
Visit ibm.com/db2/swap today 
to find out if you qualify 

And free yourself. 
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